netfilter: nft_ct: report error if mark and dir specified simultaneously
authorLiping Zhang <liping.zhang@spreadtrum.com>
Thu, 22 Sep 2016 14:28:52 +0000 (22:28 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 25 Sep 2016 12:54:04 +0000 (14:54 +0200)
commit7bfdde7045ad54d9fdccac70baffd094d9de73f8
tree299515d8e6cfd77a65dba12479cf1337841c1a90
parentd767ff2c84f19be1aa403762f34eebbb403caf6d
netfilter: nft_ct: report error if mark and dir specified simultaneously

NFT_CT_MARK is unrelated to direction, so if NFTA_CT_DIRECTION attr is
specified, report EINVAL to the userspace. This validation check was
already done at nft_ct_get_init, but we missed it in nft_ct_set_init.

Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_ct.c