netfilter: nft_exthdr: add boolean DCCP option matching
authorJeremy Sowden <jeremy@azazel.net>
Tue, 9 May 2023 21:19:45 +0000 (22:19 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 13 Dec 2023 17:39:10 +0000 (18:39 +0100)
commit0bfbfd9423f3c31db2d448109578e3df43eb5238
tree6f7f661cf5806b35d1d5d468742ad775d275a675
parent9225a4566bc1143a827f93dfb9f3162e8aa26ce2
netfilter: nft_exthdr: add boolean DCCP option matching

[ Upstream commit b9f9a485fb0eb80b0e2b90410b28cbb9b0e85687 ]

The xt_dccp iptables module supports the matching of DCCP packets based
on the presence or absence of DCCP options.  Extend nft_exthdr to add
this functionality to nftables.

Link: https://bugzilla.netfilter.org/show_bug.cgi?id=930
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Stable-dep-of: 63331e37fb22 ("netfilter: nf_tables: fix 'exist' matching on bigendian arches")
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_exthdr.c