]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 78d187d) | patch
netfilter: nft_compat: explicitly reject ERROR and standard target
authorFlorian Westphal <fw@strlen.de>
Fri, 6 Jul 2018 18:06:05 +0000 (20:06 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 9 Jul 2018 14:06:19 +0000 (16:06 +0200)
commita3348432ae3affa1515c4d05e9fc0aaf2852d026
treeedd4a10495e5c155cf53347fb58f99ebe025685etree | snapshot
parent78d187d65e3217d7809e2d99517a1eebe99b5e49commit | diff
netfilter: nft_compat: explicitly reject ERROR and standard target

iptables-nft never requests these, but make this explicitly illegal.
If it were quested, kernel could oops as ->eval is NULL, furthermore,
the builtin targets have no owning module so its possible to rmmod
eb/ip/ip6_tables module even if they would be loaded.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_compat.c diff | blob | history
Linux Kernel Source Tree.