| commit | 7edb2cefd3d12b47761051fc8eb6a7ebee9f191c | |
| author | Pablo Neira Ayuso <pablo@netfilter.org> | |
| Mon, 23 Mar 2020 13:27:16 +0000 (23 14:27 +0100) | ||
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| Wed, 1 Apr 2020 09:00:17 +0000 (1 11:00 +0200) | ||
| tree | f033483a23371d59e24c8519cc5c5fb139491881 | treesnapshot (tar.gz zip) |
| parent | ac10143c4644001d0d57ac79cad3a34c217f8c7f | commitdiff |
netfilter: nft_fwd_netdev: validate family and chain type
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.
Make sure the forward action is only used from ingress.
Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.
Make sure the forward action is only used from ingress.
Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| net/netfilter/nft_fwd_netdev.c | diffblobblamehistory |