projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8a5dad8) | patch
netfilter: nf_tables: validate catch-all set elements
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Apr 2023 10:14:29 +0000 (12:14 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Apr 2023 12:28:33 +0000 (14:28 +0200)
commitef87cd81321be22db9fc1c6943935ce365cd3417
treef9eccf8154452eabe44831838db5bbb09f969941tree | snapshot
parent8a5dad80bd83fba19667f244b91affda404b1df1commit | diff
netfilter: nf_tables: validate catch-all set elements

[ Upstream commit d46fc894147cf98dd6e8210aa99ed46854191840 ]

catch-all set element might jump/goto to chain that uses expressions
that require validation.

Fixes: aaa31047a6d2 ("netfilter: nftables: add catch-all set element support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/net/netfilter/nf_tables.h diff | blob | history
net/netfilter/nf_tables_api.c diff | blob | history
net/netfilter/nft_lookup.c diff | blob | history
Domain: System / Kernel;