netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 Jan 2024 11:50:29 +0000 (12:50 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Jan 2024 11:02:51 +0000 (12:02 +0100)
commit113661e07460a6604aacc8ae1b23695a89e7d4b3
tree0413fe9283cd9d041176cd2e6cd5611994ac8d0c
parent6b1ca88e4bb63673dc9f9c7f23c899f22c3cb17a
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description

It is still possible to set on the NFT_SET_CONCAT flag by specifying a
set size and no field description, report EINVAL in such case.

Fixes: 1b6345d4160e ("netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c