Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 64d43185 authored by Jakub Kicinski's avatar Jakub Kicinski Committed by Greg Kroah-Hartman
Browse files

netfilter: nft_payload: add missing attribute validation for payload csum flags 



commit 9d6effb2f1523eb84516e44213c00f2fd9e6afff upstream.

Add missing attribute validation for NFTA_PAYLOAD_CSUM_FLAGS
to the netlink policy.

Fixes: 18140969 ("netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields")
Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 5b425d38

net/netfilter/nft_payload.c

+1 −0
Original line number Diff line number Diff line
@@ -121,6 +121,7 @@ static const struct nla_policy nft_payload_policy[NFTA_PAYLOAD_MAX + 1] = { 
	[NFTA_PAYLOAD_LEN]		= { .type = NLA_U32 },

	[NFTA_PAYLOAD_CSUM_TYPE]	= { .type = NLA_U32 },

	[NFTA_PAYLOAD_CSUM_OFFSET]	= { .type = NLA_U32 },

	[NFTA_PAYLOAD_CSUM_FLAGS]	= { .type = NLA_U32 },

};



static int nft_payload_init(const struct nft_ctx *ctx,