Commit e10038a8 authored Jul 29, 2014 by Pablo Neira Committed by David S. Miller Jul 30, 2014

netfilter: xt_bpf: add mising opaque struct sk_filter definition



This structure is not exposed to userspace, so fix this by defining
struct sk_filter; so we skip the casting in kernelspace. This is safe
since userspace has no way to lurk with that internal pointer.

Fixes: e6f30c73 ("netfilter: x_tables: add xt_bpf match")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 5160ee93

include/uapi/linux/netfilter/xt_bpf.h

+2 −0

Original line number	Diff line number	Diff line
		@@ -6,6 +6,8 @@

		#define XT_BPF_MAX_NUM_INSTR 64

		struct sk_filter;

		struct xt_bpf_info {
		__u16 bpf_program_num_elem;
		struct sock_filter bpf_program[XT_BPF_MAX_NUM_INSTR];