netfilter: nf_conntrack: restrict NAT helper invocation to IPv4

[mirror_ubuntu-bionic-kernel.git] / net / netfilter / nf_conntrack_irc.c

diff --git a/net/netfilter/nf_conntrack_irc.c b/net/netfilter/nf_conntrack_irc.c
index 009c52cfd1ec4b9b86a8dd7bf047f3eae249fd8a..e06dc2fab19ffaef6e30a8dc79c2f7ab0e005c12 100644 (file)
--- a/net/netfilter/nf_conntrack_irc.c
+++ b/net/netfilter/nf_conntrack_irc.c
@@ -204,7 +204,8 @@ static int help(struct sk_buff *skb, unsigned int protoff,
                                          IPPROTO_TCP, NULL, &port);
 
                        nf_nat_irc = rcu_dereference(nf_nat_irc_hook);
-                       if (nf_nat_irc && ct->status & IPS_NAT_MASK)
+                       if (nf_nat_irc && nf_ct_l3num(ct) == NFPROTO_IPV4 &&
+                           ct->status & IPS_NAT_MASK)
                                ret = nf_nat_irc(skb, ctinfo,
                                                 addr_beg_p - ib_ptr,
                                                 addr_end_p - addr_beg_p,