Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5ae2daf9 authored by Jakub Kicinski's avatar Jakub Kicinski Committed by Greg Kroah-Hartman
Browse files

netfilter: nft_tunnel: add missing attribute validation for tunnels 



commit 88a637719a1570705c02cacb3297af164b1714e7 upstream.

Add missing attribute validation for tunnel source and
destination ports to the netlink policy.

Fixes: af308b94 ("netfilter: nf_tables: add tunnel support")
Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 64d43185

net/netfilter/nft_tunnel.c

+2 −0
Original line number Diff line number Diff line
@@ -308,6 +308,8 @@ static const struct nla_policy nft_tunnel_key_policy[NFTA_TUNNEL_KEY_MAX + 1] = 
	[NFTA_TUNNEL_KEY_FLAGS]	= { .type = NLA_U32, },

	[NFTA_TUNNEL_KEY_TOS]	= { .type = NLA_U8, },

	[NFTA_TUNNEL_KEY_TTL]	= { .type = NLA_U8, },

	[NFTA_TUNNEL_KEY_SPORT]	= { .type = NLA_U16, },

	[NFTA_TUNNEL_KEY_DPORT]	= { .type = NLA_U16, },

	[NFTA_TUNNEL_KEY_OPTS]	= { .type = NLA_NESTED, },

};