]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Fri, 1 Nov 2019 16:13:18 +0000 (17:13 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 4 Dec 2019 21:33:28 +0000 (22:33 +0100)
commitd78d5745afe7ac855b5869b0429c3e1a7545d629
treec290e9f0fd3acecd880755a60cde9b7350f0a0fd
parent9a41a61a52db7b011643bc4134b56c6704193f0e
netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT

[ Upstream commit 1289975643f4cdecb071dc641059a47679fd170f ]

Since v5.2 (commit "netlink: re-add parse/validate functions in strict
mode") NL_VALIDATE_STRICT is enabled. Fix the ipset nla_policies which did
not support strict mode and convert from deprecated parsings to verified ones.

Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/ipset/ip_set_core.c
net/netfilter/ipset/ip_set_hash_net.c
net/netfilter/ipset/ip_set_hash_netnet.c