bridge: ebtables: don't crash when using dnat target in output chains
authorFlorian Westphal <fw@strlen.de>
Sun, 3 Nov 2019 19:54:28 +0000 (20:54 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 5 Dec 2019 08:19:41 +0000 (09:19 +0100)
commitc5b0bbef436756eda3e2195219bbf227a50a2f71
tree5b1632f9de887fccaaa1c427ebb717889a4ccfee
parent2070b33ee9873e06711d9c69cbd75d4dcc921fbd
bridge: ebtables: don't crash when using dnat target in output chains

[ Upstream commit b23c0742c2ce7e33ed79d10e451f70fdb5ca85d1 ]

xt_in() returns NULL in the output hook, skip the pkt_type change for
that case, redirection only makes sense in broute/prerouting hooks.

Reported-by: Tom Yan <tom.ty89@gmail.com>
Cc: Linus Lüssing <linus.luessing@c0d3.blue>
Fixes: cf3cb246e277d ("bridge: ebtables: fix reception of frames DNAT-ed to bridge device/port")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bridge/netfilter/ebt_dnat.c