X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=net%2Fnetfilter%2Fnft_socket.c;h=f30163e2ca620783cceda339c702c9f81b29cfa2;hb=c1be9784f3adad7b02e4723e1fcbdcee07860444;hp=9ed85be79452d990ad79ad9a0b31a26bb3f4c6a4;hpb=0e72db77672ff4758a31fb5259c754a7bb229751;p=platform%2Fkernel%2Flinux-rpi.git

diff --git a/net/netfilter/nft_socket.c b/net/netfilter/nft_socket.c
index 9ed85be..f30163e 100644
--- a/net/netfilter/nft_socket.c
+++ b/net/netfilter/nft_socket.c
@@ -242,6 +242,11 @@ static int nft_socket_validate(const struct nft_ctx *ctx,
 			       const struct nft_expr *expr,
 			       const struct nft_data **data)
 {
+	if (ctx->family != NFPROTO_IPV4 &&
+	    ctx->family != NFPROTO_IPV6 &&
+	    ctx->family != NFPROTO_INET)
+		return -EOPNOTSUPP;
+
 	return nft_chain_validate_hooks(ctx->chain,
 					(1 << NF_INET_PRE_ROUTING) |
 					(1 << NF_INET_LOCAL_IN) |