]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: enforce ip6 proto with exthdr expression
authorFlorian Westphal <fw@strlen.de>
Wed, 2 Mar 2016 12:56:43 +0000 (13:56 +0100)
committerFlorian Westphal <fw@strlen.de>
Wed, 2 Mar 2016 12:56:43 +0000 (13:56 +0100)
commitd63da0cc9620ae4a274fb006f0ca01e1e0ecf4f2
tree058107277c3b962fca8388e5b84db472724cac56
parent92a9e83b41dc0a1600aa0af63fe569fcb6277e56
evaluate: enforce ip6 proto with exthdr expression

Don't allow use of exthdr with e.g. ip family.
Move frag.t to ip6 directory and don't use it with ipv4 anymore.

This change causes major test failures for all exthdr users
since they now fail with inet/bridge/netdev families.

Will be resolved in a later patch -- we need to add
an ipv6 dependency for them.

Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c
tests/py/ip6/frag.t [moved from tests/py/any/frag.t with 95% similarity]
tests/py/ip6/frag.t.payload.ip6 [moved from tests/py/any/frag.t.payload with 82% similarity]