]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
netfilter: ebtables: fix erroneous reject of last rule
authorFlorian Westphal <fw@strlen.de>
Thu, 8 Mar 2018 11:54:19 +0000 (12:54 +0100)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Mon, 27 Aug 2018 14:40:05 +0000 (16:40 +0200)
commit096091418009cf8b762634ea663d59b23b3f529f
tree68bec73479396e4634322c19524c86505798205b
parent53a07abc3c54e97b88d71d0812ffc098c526834e
netfilter: ebtables: fix erroneous reject of last rule

BugLink: http://bugs.launchpad.net/bugs/1786352
[ Upstream commit 932909d9b28d27e807ff8eecb68c7748f6701628 ]

The last rule in the blob has next_entry offset that is same as total size.
This made "ebtables32 -A OUTPUT -d de:ad:be:ef:01:02" fail on 64 bit kernel.

Fixes: b71812168571fa ("netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
net/bridge/netfilter/ebtables.c