git.itanic.dy.fi Git - linux-stable/commit

]> git.itanic.dy.fi Git - linux-stable/commit

author	Florian Westphal <fw@strlen.de>
	Sun, 8 Oct 2023 17:36:53 +0000 (19:36 +0200)
committer	Florian Westphal <fw@strlen.de>
	Thu, 12 Oct 2023 08:28:45 +0000 (10:28 +0200)
commit	d351c1ea2de3e36e608fc355d8ae7d0cc80e6cd6
tree	f404d1a5d8f782c0cc555ffe1e25532f4fc0bcb3	tree \| snapshot
parent	505ce0630ad5d31185695f8a29dde8d29f28faa7	commit \| diff

netfilter: nft_payload: fix wrong mac header matching

mcast packets get looped back to the local machine.
Such packets have a 0-length mac header, we should treat
this like "mac header not set" and abort rule evaluation.

As-is, we just copy data from the network header instead.

Fixes: 96518518cc41 ("netfilter: add nftables")
Reported-by: Blažej Krajňák <krajnak@levonet.sk>
Signed-off-by: Florian Westphal <fw@strlen.de>

net/netfilter/nft_payload.c

diff | blob | history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom