Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b2907e50 authored by Alexey Dobriyan's avatar Alexey Dobriyan Committed by Patrick McHardy
Browse files

netfilter: xtables: fix mangle tables 



In POST_ROUTING hook, calling dev_net(in) is going to oops.

Signed-off-by: default avatarAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 9d288dff

net/ipv4/netfilter/iptable_mangle.c

+3 −1
Original line number Diff line number Diff line
@@ -87,7 +87,9 @@ iptable_mangle_hook(unsigned int hook, 
{

	if (hook == NF_INET_LOCAL_OUT)

		return ipt_local_hook(hook, skb, in, out, okfn);



	if (hook == NF_INET_POST_ROUTING)

		return ipt_do_table(skb, hook, in, out,

				    dev_net(out)->ipv4.iptable_mangle);

	/* PREROUTING/INPUT/FORWARD: */

	return ipt_do_table(skb, hook, in, out,

			    dev_net(in)->ipv4.iptable_mangle);

net/ipv6/netfilter/ip6table_mangle.c

+3 −1
Original line number Diff line number Diff line
@@ -81,7 +81,9 @@ ip6table_mangle_hook(unsigned int hook, struct sk_buff *skb, 
{

	if (hook == NF_INET_LOCAL_OUT)

		return ip6t_local_out_hook(hook, skb, out, okfn);



	if (hook == NF_INET_POST_ROUTING)

		return ip6t_do_table(skb, hook, in, out,

				     dev_net(out)->ipv6.ip6table_mangle);

	/* INPUT/FORWARD */

	return ip6t_do_table(skb, hook, in, out,

			     dev_net(in)->ipv6.ip6table_mangle);