netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Apr 2023 15:50:28 +0000 (17:50 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 18 Apr 2023 07:30:21 +0000 (09:30 +0200)
commitd4eb7e39929a3b1ff30fb751b4859fc2410702a0
tree21ad87ff5ed6697d9c2c22b01418da907433d35d
parentd46fc894147cf98dd6e8210aa99ed46854191840
netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements

If NFT_SET_ELEM_CATCHALL is set on, then userspace provides no set element
key. Otherwise, bail out with -EINVAL.

Fixes: aaa31047a6d2 ("netfilter: nftables: add catch-all set element support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c