diff options
| author | gVisor bot <gvisor-bot@google.com> | 2020-08-13 20:11:56 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-08-13 20:11:56 +0000 |
| commit | f8e003defed3b62890933a3d7eaaaee2529d413b (patch) | |
| tree | b9578ae0be7b08891f2acb7f90c87a93409a90c3 /pkg/tcpip/stack/iptables.go | |
| parent | 8b0712eb214705d5af3d2b726866e093d86d89fe (diff) | |
| parent | 47515f475167ffa23267ca0b9d1b39e7907587d6 (diff) | |
Merge release-20200810.0-23-g47515f475 (automated)
Diffstat (limited to 'pkg/tcpip/stack/iptables.go')
| -rw-r--r-- | pkg/tcpip/stack/iptables.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/tcpip/stack/iptables.go b/pkg/tcpip/stack/iptables.go index 110ba073d..c37da814f 100644 --- a/pkg/tcpip/stack/iptables.go +++ b/pkg/tcpip/stack/iptables.go @@ -394,7 +394,7 @@ func (it *IPTables) checkRule(hook Hook, pkt *PacketBuffer, table Table, ruleIdx rule := table.Rules[ruleIdx] // Check whether the packet matches the IP header filter. - if !rule.Filter.match(header.IPv4(pkt.NetworkHeader), hook, nicName) { + if !rule.Filter.match(header.IPv4(pkt.NetworkHeader().View()), hook, nicName) { // Continue on to the next rule. return RuleJump, ruleIdx + 1 } |