netfilter: ebtables: fix erroneous reject of last rule
authorFlorian Westphal <fw@strlen.de>
Thu, 8 Mar 2018 11:54:19 +0000 (12:54 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 30 May 2018 05:52:14 +0000 (07:52 +0200)
commit533f5f847dfdfc76d965ecbeb0e5f572e015c524
tree1d7be7771504512564a48aa15e5a8b7beb10a6ba
parent2299285fb1819ef8459c116fd1eafe1458bb9ca1
netfilter: ebtables: fix erroneous reject of last rule

[ Upstream commit 932909d9b28d27e807ff8eecb68c7748f6701628 ]

The last rule in the blob has next_entry offset that is same as total size.
This made "ebtables32 -A OUTPUT -d de:ad:be:ef:01:02" fail on 64 bit kernel.

Fixes: b71812168571fa ("netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/bridge/netfilter/ebtables.c