netfilter: nft_nat: correct length for loading protocol registers
authorJeremy Sowden <jeremy@azazel.net>
Tue, 7 Mar 2023 23:22:56 +0000 (23:22 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 8 Mar 2023 11:25:59 +0000 (12:25 +0100)
commit068d82e75d537b444303b8c449a11e51ea659565
tree92e6795f145c4328dd0efb97296212f54fcbc88b
parent37d9df224d1eec1b434fe9ffa40104c756478c29
netfilter: nft_nat: correct length for loading protocol registers

The values in the protocol registers are two bytes wide.  However, when
parsing the register loads, the code currently uses the larger 16-byte
size of a `union nf_inet_addr`.  Change it to use the (correct) size of
a `union nf_conntrack_man_proto` instead.

Fixes: d07db9884a5f ("netfilter: nf_tables: introduce nft_validate_register_load()")
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_nat.c