]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_payload: cancel register tracking after payload update
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 16:11:25 +0000 (17:11 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 22:35:17 +0000 (23:35 +0100)
commit4aeeaab690d3fc3878c8eb91d4044788e433e60d
tree1603eac8bd9c3f179ac9f54f0a3c5f428faeb743
parent6ad8275c333965ca34d96fb5b4054518532f1355
netfilter: nft_payload: cancel register tracking after payload update

The payload expression might mangle the packet, cancel register tracking
since any payload data in the registers is stale.

Finer grain register tracking cancellation by inspecting the payload
base, offset and length on the register is also possible.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c