]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 11 Jun 2021 17:26:56 +0000 (19:26 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 20 Jul 2021 14:15:50 +0000 (16:15 +0200)
commit6b97694d0a76c7b5f5e374dab2a3b1ef54899dc7
treee8f79403d44a063da58538975aca8bc76bda58be
parent3225cd78880a15928f8930e3de698a6edca63f42
netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols

[ Upstream commit 52f0f4e178c757b3d356087376aad8bd77271828 ]

Add unfront check for TCP and UDP packets before performing further
processing.

Fixes: 4ed8eb6570a4 ("netfilter: nf_tables: Add native tproxy support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_tproxy.c