tree f164bead26b172ee82d6eaa81a0148d980985bce
parent bb72845e699d3c84e5f861b51db686107a51dea5
author Herbert Xu <herbert@gondor.apana.org.au> 1197514456 -0800
committer David S. Miller <davem@davemloft.net> 1201561063 -0800

[IPSEC]: Do not let packets pass when ICMP flag is off

This fixes a logical error in ICMP policy checks which lets
packets through if the state ICMP flag is off.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>