netfilter: nft_tunnel: add missing attribute validation for tunnels
authorJakub Kicinski <kuba@kernel.org>
Tue, 3 Mar 2020 05:08:33 +0000 (21:08 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 18 Mar 2020 06:17:57 +0000 (07:17 +0100)
commit15ec06c6a8948c5c0888c8086da8490cd0511633
treee5e383297c1489138d919b246e418325b0f87ad5
parente92dea63e27879d9740ce16b1f8d5e98174306af
netfilter: nft_tunnel: add missing attribute validation for tunnels

commit 88a637719a1570705c02cacb3297af164b1714e7 upstream.

Add missing attribute validation for tunnel source and
destination ports to the netlink policy.

Fixes: af308b94a2a4 ("netfilter: nf_tables: add tunnel support")
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_tunnel.c