]> git.itanic.dy.fi Git - linux-stable/commit
projects / linux-stable / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5fac9b7) | patch
netfilter: nf_tables: use NLA_POLICY_MASK to test for valid flag options
authorFlorian Westphal <fw@strlen.de>
Tue, 18 Jul 2023 07:52:30 +0000 (09:52 +0200)
committerFlorian Westphal <fw@strlen.de>
Thu, 27 Jul 2023 11:45:51 +0000 (13:45 +0200)
commit100a11b69842ab568cff2a59959daf317be525c9
tree6ec67965f4fd5c9b607839e58acb5b7daf2c0671tree | snapshot
parent5fac9b7c16c50c6c7699517f582b56e3743f453acommit | diff
netfilter: nf_tables: use NLA_POLICY_MASK to test for valid flag options

nf_tables relies on manual test of netlink attributes coming from userspace
even in cases where this could be handled via netlink policy.

Convert a bunch of 'flag' attributes to use NLA_POLICY_MASK checks.

Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nft_fib.c diff | blob | history
net/netfilter/nft_lookup.c diff | blob | history
net/netfilter/nft_masq.c diff | blob | history
net/netfilter/nft_nat.c diff | blob | history
net/netfilter/nft_redir.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.