diff options
| author |   Phil Sutter <phil@nwl.cc> | 2016-04-12 01:31:14 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2016-04-13 01:16:57 +0200 |
| commit | bcf4934288402be3464110109a4dae3bd6fb3e93 (patch) | |
| tree | bc56faa21bf6d61dd7b94f302c828ef0a50185c9 /tools/perf/scripts/python/call-graph-from-postgresql.py | |
| parent | netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (diff) | |
| download | wireguard-linux-bcf4934288402be3464110109a4dae3bd6fb3e93.tar.xz wireguard-linux-bcf4934288402be3464110109a4dae3bd6fb3e93.zip | |
netfilter: ebtables: Fix extension lookup with identical name
If a requested extension exists as module and is not loaded,
ebt_check_match() might accidentally use an NFPROTO_UNSPEC one with same
name and fail.
Reproduced with limit match: Given xt_limit and ebt_limit both built as
module, the following would fail:
modprobe xt_limit
ebtables -I INPUT --limit 1/s -j ACCEPT
The fix is to make ebt_check_match() distrust a found NFPROTO_UNSPEC
extension and retry after requesting an appropriate module.
Cc: Florian Westphal <fw@strlen.de>
Signed-off-by: Phil Sutter <phil@nwl.cc>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/call-graph-from-postgresql.py')
0 files changed, 0 insertions, 0 deletions