| commit | 24c290b811945102e2c0e51cfe4b9efea9ae49d4 | |
| author | Pablo Neira Ayuso <pablo@netfilter.org> | |
| Mon, 23 Mar 2020 13:27:16 +0000 (23 14:27 +0100) | ||
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| Thu, 2 Apr 2020 13:28:19 +0000 (2 15:28 +0200) | ||
| tree | c767ae789073e7ed659c5932c776bee3a8e99e8a | treesnapshot (tar.gz zip) |
| parent | 113df2c58a723b6e30b3f0b7b5bf1dee16d177db | commitdiff |
netfilter: nft_fwd_netdev: validate family and chain type
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.
Make sure the forward action is only used from ingress.
Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.
Make sure the forward action is only used from ingress.
Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| net/netfilter/nft_fwd_netdev.c | diffblobblamehistory |