]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 27 Dec 2020 11:33:44 +0000 (12:33 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 28 Dec 2020 09:50:16 +0000 (10:50 +0100)
commit342fe0cb584070d98cefeb64dcc4ac61e055e951
tree6e75cae1db8cc0fd96b2914c661f92939bc83d22
parent5abd3b25be1bc879db0500674354ef373f81a1ad
netfilter: nft_dynset: report EOPNOTSUPP on missing set feature

If userspace requests a feature which is not available the original set
definition, then bail out with EOPNOTSUPP. If userspace sends
unsupported dynset flags (new feature not supported by this kernel),
then report EOPNOTSUPP to userspace. EINVAL should be only used to
report malformed netlink messages from userspace.

Fixes: 442306e18704 ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_dynset.c