]> git.ipfire.org Git - thirdparty/nftables.git/commit
mnl: Don't use nftnl_set_set()
authorPhil Sutter <phil@nwl.cc>
Tue, 15 Oct 2019 13:58:13 +0000 (15:58 +0200)
committerPhil Sutter <phil@nwl.cc>
Tue, 15 Oct 2019 15:16:20 +0000 (17:16 +0200)
commit0ef5429f87dee067c8a70ef9d5b477198c803fcc
tree01b1afd53f1da63ed7f1448cbd8b135cbfa2fb5d
parent023c2d3301a06e2782d39e11ecc3345863a276b1
mnl: Don't use nftnl_set_set()

The function is unsafe to use as it effectively bypasses data length
checks. Instead use nftnl_set_set_str() which at least asserts a const
char pointer is passed.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/mnl.c