diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-15 17:55:07 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-15 18:41:21 +0200 |
| commit | 1b6345d4160ecd3d04bd8cd75df90c67811e8cc9 (patch) | |
| tree | c0470ac457e179fafead9f1324102134c678b90a /tools/scripts/ssh:/git@git.zx2c4.com/git: | |
| parent | netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (diff) | |
| download | linux-dev-1b6345d4160ecd3d04bd8cd75df90c67811e8cc9.tar.xz linux-dev-1b6345d4160ecd3d04bd8cd75df90c67811e8cc9.zip | |
netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified
Since f3a2181e16f1 ("netfilter: nf_tables: Support for sets with
multiple ranged fields"), it possible to combine intervals and
concatenations. Later on, ef516e8625dd ("netfilter: nf_tables:
reintroduce the NFT_SET_CONCAT flag") provides the NFT_SET_CONCAT flag
for userspace to report that the set stores a concatenation.
Make sure NFT_SET_CONCAT is set on if field_count is specified for
consistency. Otherwise, if NFT_SET_CONCAT is specified with no
field_count, bail out with EINVAL.
Fixes: ef516e8625dd ("netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/scripts/ssh:/git@git.zx2c4.com/git:')
0 files changed, 0 insertions, 0 deletions