netfilter: nft_fwd_netdev: validate family and chain type
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 23 Mar 2020 13:27:16 +0000 (14:27 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 Apr 2020 15:20:35 +0000 (17:20 +0200)
commit282fd1fb2ff8f2f1b722903d8af844ef346424c1
tree38f229526e000432456b7904c6b931b43dd6fb66
parent86e98ce7de083649e330d518e98a80b9e39b5d43
netfilter: nft_fwd_netdev: validate family and chain type

commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.

Make sure the forward action is only used from ingress.

Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_fwd_netdev.c