]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b56bce5) | patch
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 Jan 2024 11:50:29 +0000 (12:50 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Jan 2024 23:27:51 +0000 (15:27 -0800)
commit4a45e7e7d2a628341790819fc5b030f15a00613a
treeccbc3b337f03d714cb4e4835f566c0ce19af7c54tree
parentb56bce52f9f6bc79197ddd00f9db16e5d46cacdecommit | diff
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description

[ Upstream commit 113661e07460a6604aacc8ae1b23695a89e7d4b3 ]

It is still possible to set on the NFT_SET_CONCAT flag by specifying a
set size and no field description, report EINVAL in such case.

Fixes: 1b6345d4160e ("netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git