netfilter: nft_payload: cancel register tracking after payload update
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 16:11:25 +0000 (17:11 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 9 Jan 2022 22:35:17 +0000 (23:35 +0100)
commitcc003c7ee6094bca65435ca4bdbba8c98a7c859f
tree1603eac8bd9c3f179ac9f54f0a3c5f428faeb743
parentbe5650f8f47e8cffbbbcad08b71103685e971f20
netfilter: nft_payload: cancel register tracking after payload update

The payload expression might mangle the packet, cancel register tracking
since any payload data in the registers is stale.

Finer grain register tracking cancellation by inspecting the payload
base, offset and length on the register is also possible.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c