]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Dec 2019 21:49:58 +0000 (22:49 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 9 Dec 2019 12:14:05 +0000 (13:14 +0100)
commitcc01df19f1ef7b7593cbc258817179f12b47e1cc
treee60fc2f886d1f4944449f2c1f8dff19e1f0c985f
parent14916f03d0b2fddd62e205ea4b7f0aaea2d9b009
netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions

If the rule only specifies the matching side, return EOPNOTSUPP.
Otherwise, the front-end relies on the drivers to reject this rule.

Fixes: 5b0ceb7358a3 ("netfilter: nf_tables: add hardware offload support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_offload.c