--- net/ipv4/netfilter/ip_tables.c.ski	2004-06-30 22:33:38.890839488 +0200
+++ net/ipv4/netfilter/ip_tables.c	2004-06-30 22:34:27.547442560 +0200
@@ -1458,7 +1458,7 @@
 		int *hotdrop)
 {
 	/* tcp.doff is only 4 bits, ie. max 15 * 4 bytes */
-	char opt[60 - sizeof(struct tcphdr)];
+	u_int8_t opt[60 - sizeof(struct tcphdr)];
 	unsigned int i;
 
 	duprintf("tcp_match: finding option\n");