tree bda499516fd0fc9c045a17b9e14251acd84ae330
parent c71caf4114a0e1da3451cc92fba6a152929cd4c2
author Thomas Jacob <jacob@internet24.de> 1295901336 +0100
committer Patrick McHardy <kaber@trash.net> 1295901336 +0100

netfilter: xt_iprange: Incorrect xt_iprange boundary check for IPv6

iprange_ipv6_sub was substracting 2 unsigned ints and then casting
the result to int to find out whether they are lt, eq or gt each
other, this doesn't work if the full 32 bits of each part
can be used in IPv6 addresses. Patch should remedy that without
significant performance penalties. Also number of ntohl
calls can be reduced this way (Jozsef Kadlecsik).

Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>