]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/commit
bridge: ebtables: don't crash when using dnat target in output chains
authorFlorian Westphal <fw@strlen.de>
Sun, 3 Nov 2019 19:54:28 +0000 (20:54 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Nov 2019 19:58:34 +0000 (20:58 +0100)
commitb23c0742c2ce7e33ed79d10e451f70fdb5ca85d1
treeeeaa498c92df51c2684353329d289d88b3c987db
parent9fedd894b4e1c7ad5e5f711899f6a0a1da01d996
bridge: ebtables: don't crash when using dnat target in output chains

xt_in() returns NULL in the output hook, skip the pkt_type change for
that case, redirection only makes sense in broute/prerouting hooks.

Reported-by: Tom Yan <tom.ty89@gmail.com>
Cc: Linus Lüssing <linus.luessing@c0d3.blue>
Fixes: cf3cb246e277d ("bridge: ebtables: fix reception of frames DNAT-ed to bridge device/port")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/netfilter/ebt_dnat.c