netfilter: nf_tables: disallow binding to already bound chain
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 22 Aug 2022 09:06:39 +0000 (11:06 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 31 Aug 2022 15:16:42 +0000 (17:16 +0200)
commit51f192ae71c3431aa69a988449ee2fd288e57648
treec200f1746991c1ccfa0b19fff774ad8a74799e71
parent7196f4577f1c34e4eb1e2dbc6e3a436b3bdb7aeb
netfilter: nf_tables: disallow binding to already bound chain

[ Upstream commit e02f0d3970404bfea385b6edb86f2d936db0ea2b ]

Update nft_data_init() to report EINVAL if chain is already bound.

Fixes: d0e2c7de92c7 ("netfilter: nf_tables: add NFT_CHAIN_BINDING")
Reported-by: Gwangun Jung <exsociety@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c