]> git.itanic.dy.fi Git - linux-stable/commit
projects / linux-stable / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7395dfa) | patch
netfilter: nfnetlink_queue: un-break NF_REPEAT
authorFlorian Westphal <fw@strlen.de>
Tue, 6 Feb 2024 16:54:18 +0000 (17:54 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 8 Feb 2024 11:10:19 +0000 (12:10 +0100)
commitf82777e8ce6c039cdcacbcf1eb8619b99a20c06d
tree1c1ad39ff43d5aed2bb56bb3182e049173aaad84tree | snapshot
parent7395dfacfff65e9938ac0889dafa1ab01e987d15commit | diff
netfilter: nfnetlink_queue: un-break NF_REPEAT

Only override userspace verdict if the ct hook returns something
other than ACCEPT.

Else, this replaces NF_REPEAT (run all hooks again) with NF_ACCEPT
(move to next hook).

Fixes: 6291b3a67ad5 ("netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts")
Reported-by: l.6diay@passmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_queue.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.