netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Apr 2023 15:50:28 +0000 (17:50 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Apr 2023 12:28:34 +0000 (14:28 +0200)
commit8e1f40e8f707857a9327dac6fce11dc3a3270117
treee7c6beab3205a51e64d288cb098b86114fc1324d
parentef87cd81321be22db9fc1c6943935ce365cd3417
netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements

[ Upstream commit d4eb7e39929a3b1ff30fb751b4859fc2410702a0 ]

If NFT_SET_ELEM_CATCHALL is set on, then userspace provides no set element
key. Otherwise, bail out with -EINVAL.

Fixes: aaa31047a6d2 ("netfilter: nftables: add catch-all set element support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c