diff options
| author |   Phil Sutter <phil@nwl.cc> | 2023-06-16 17:56:11 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2023-06-20 22:43:42 +0200 |
| commit | 42e344f01688490cdac4bed8f5ba21817cad26ee (patch) | |
| tree | 46f18ae549d01e1da76f421367c8376e8f7f96d5 /scripts/generate_rust_analyzer.py | |
| parent | netfilter: nfnetlink_osf: fix module autoload (diff) | |
| download | wireguard-linux-42e344f01688490cdac4bed8f5ba21817cad26ee.tar.xz wireguard-linux-42e344f01688490cdac4bed8f5ba21817cad26ee.zip | |
netfilter: nf_tables: Fix for deleting base chains with payload
When deleting a base chain, iptables-nft simply submits the whole chain
to the kernel, including the NFTA_CHAIN_HOOK attribute. The new code
added by fixed commit then turned this into a chain update, destroying
the hook but not the chain itself. Detect the situation by checking if
the chain type is either netdev or inet/ingress.
Fixes: 7d937b107108f ("netfilter: nf_tables: support for deleting devices in an existing netdev chain")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions