]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
netfilter: nft_fwd_netdev: validate family and chain type
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 23 Mar 2020 13:27:16 +0000 (14:27 +0100)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Tue, 7 Apr 2020 08:52:52 +0000 (10:52 +0200)
commitafd69cfd3b81eaeba9322a8736196ce59c96a46a
treeddadf8fc19e2d4190ff4ebba2f2e045f5756b8ec
parent4da182954d5d96ba0c822714fa9c5d1fb1d298d9
netfilter: nft_fwd_netdev: validate family and chain type

BugLink: https://bugs.launchpad.net/bugs/1870604
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.

Make sure the forward action is only used from ingress.

Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
net/netfilter/nft_fwd_netdev.c