]> git.ipfire.org Git - people/arne_f/kernel.git/commit
projects / people / arne_f / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dc0ea9b) | patch
netfilter: nft_fwd_netdev: validate family and chain type
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 23 Mar 2020 13:27:16 +0000 (14:27 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 Apr 2020 14:34:32 +0000 (16:34 +0200)
commitba2bc76526e19cc6d67bbaa3c979ab3c576d71e9
tree1ddf272be8b8c0168b662e6ae8f82927f8ca1ea5tree | snapshot
parentdc0ea9b710102ef628a26663d892031a2c381549commit | diff
netfilter: nft_fwd_netdev: validate family and chain type

commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.

Make sure the forward action is only used from ingress.

Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_fwd_netdev.c diff | blob | blame | history
Arne's tree of linux kernel.