]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/commit - net/netfilter/nft_compat.c
projects / mirror_ubuntu-zesty-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7210e4e) | patch
netfilter: nft_compat: fix hook validation for non-base chains
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 14 Oct 2014 10:43:50 +0000 (12:43 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 14 Oct 2014 10:52:40 +0000 (12:52 +0200)
commit493618a92c6afdd3f6224ab586f169d6a259bb06
tree53888e90a90e3a663d23581dc072f60364bf922dtree
parent7210e4e38f945dfa173c4a4e59ad827c9ecad541commit | diff
netfilter: nft_compat: fix hook validation for non-base chains

Set hook_mask to zero for non-base chains, otherwise people may hit
bogus errors from the xt_check_target() and xt_check_match() when
validating the uninitialized hook_mask.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_compat.c diff | blob | blame | history
ubuntu-zesty-kernel mirror