]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_payload: cancel register tracking after payload update
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 16:11:25 +0000 (17:11 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 22:35:17 +0000 (23:35 +0100)
commite0df943ff852b6a11b130a189f902d89873708a6
tree1603eac8bd9c3f179ac9f54f0a3c5f428faeb743
parent91c30e5bd2ae7815343e0a9808bf729bb8808006
netfilter: nft_payload: cancel register tracking after payload update

The payload expression might mangle the packet, cancel register tracking
since any payload data in the registers is stale.

Finer grain register tracking cancellation by inspecting the payload
base, offset and length on the register is also possible.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c