git.samba.org / sfrench / cifs-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c055fc0) | patch
netfilter: nf_tables: disallow anonymous set with timeout flag
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 29 Feb 2024 23:11:10 +0000 (00:11 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 6 Mar 2024 23:02:42 +0000 (00:02 +0100)
commit16603605b667b70da974bea8216c93e7db043bf1
treea3347212f629d997b3dfae2a0dfa9f53f6492eabtree
parentc055fc00c07be1f0df7375ab0036cebd1106ed38commit | diff
netfilter: nf_tables: disallow anonymous set with timeout flag

Anonymous sets are never used with timeout from userspace, reject this.
Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.

Cc: stable@vger.kernel.org
Fixes: 761da2935d6e ("netfilter: nf_tables: add set timeout API support")
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.