[IPSEC]: Fix reversed ICMP6 policy check

[linux-2.6-omap-h63xx.git] / net / ipv6 / icmp.c

diff --git a/net/ipv6/icmp.c b/net/ipv6/icmp.c
index c0bea7bfaa8a713ebc55c5663327e635a97a4b60..1659d2fb01fee445eaeae74470cf3c98c56b51b5 100644 (file)
--- a/net/ipv6/icmp.c
+++ b/net/ipv6/icmp.c
@@ -644,7 +644,7 @@ static int icmpv6_rcv(struct sk_buff *skb)
        struct icmp6hdr *hdr;
        int type;
 
-       if (xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb) &&
+       if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb) && skb->sp &&
            skb->sp->xvec[skb->sp->len - 1]->props.flags & XFRM_STATE_ICMP) {
                int nh;