diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-12 16:21:28 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-15 17:54:51 +0200 |
| commit | 88cccd908d51397f9754f89a937cd13fa59dee37 (patch) | |
| tree | 8b82734d724baa8474ac0b099370639dfdaeac5b /tools/scripts/ssh:/git@git.zx2c4.com/git: | |
| parent | netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (diff) | |
| download | linux-dev-88cccd908d51397f9754f89a937cd13fa59dee37.tar.xz linux-dev-88cccd908d51397f9754f89a937cd13fa59dee37.zip | |
netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags
If the NFT_SET_CONCAT|NFT_SET_INTERVAL flags are set on, then the
netlink attribute NFTA_SET_ELEM_KEY_END must be specified. Otherwise,
NFTA_SET_ELEM_KEY_END should not be present.
For catch-all element, NFTA_SET_ELEM_KEY_END should not be present.
The NFT_SET_ELEM_INTERVAL_END is never used with this set flags
combination.
Fixes: 7b225d0b5c6d ("netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/scripts/ssh:/git@git.zx2c4.com/git:')
0 files changed, 0 insertions, 0 deletions