Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e5042a29 authored by Jan Engelhardt's avatar Jan Engelhardt
Browse files

netfilter: xtables: limit xt_mac to ethernet devices 



I do not see a point of allowing the MAC module to work with devices
that don't possibly have one, e.g. various tunnel interfaces such as
tun and sit.

Signed-off-by: default avatarJan Engelhardt <jengelh@medozas.de>
parent 1d1c397d

net/netfilter/xt_mac.c

+3 −0
Original line number Diff line number Diff line
@@ -10,6 +10,7 @@ 


#include <linux/module.h>

#include <linux/skbuff.h>

#include <linux/if_arp.h>

#include <linux/if_ether.h>

#include <linux/etherdevice.h>
@@ -29,6 +30,8 @@ static bool mac_mt(const struct sk_buff *skb, const struct xt_match_param *par) 
	const struct xt_mac_info *info = par->matchinfo;

	bool ret;



	if (skb->dev == NULL || skb->dev->type != ARPHRD_ETHER)

		return false;

	if (skb_mac_header(skb) < skb->head)

		return false;

	if (skb_mac_header(skb) + ETH_HLEN > skb->data)