From 4f3775bb866aa4b19024266cb3db1705f3c9f710 Mon Sep 17 00:00:00 2001
From: Adam Ierymenko <adam.ierymenko@gmail.com>
Date: Thu, 13 Oct 2016 14:21:00 -0700
Subject: Fix ICMP match.

---
 node/Network.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'node')

diff --git a/node/Network.cpp b/node/Network.cpp
index 8a30f5f8..4fd3bfc1 100644
--- a/node/Network.cpp
+++ b/node/Network.cpp
@@ -383,8 +383,8 @@ static _doZtFilterResult _doZtFilter(
 				break;
 			case ZT_NETWORK_RULE_MATCH_ICMP:
 				if ((etherType == ZT_ETHERTYPE_IPV4)&&(frameLen >= 20)) {
-					if (frameData[9] == 0x01) {
-						const unsigned int ihl = (frameData[0] & 0xf) * 32;
+					if (frameData[9] == 0x01) { // IP protocol == ICMP
+						const unsigned int ihl = (frameData[0] & 0xf) * 4;
 						if (frameLen >= (ihl + 2)) {
 							if (rules[rn].v.icmp.type == frameData[ihl]) {
 								if ((rules[rn].v.icmp.flags & 0x01) != 0) {
-- 
cgit v1.2.3