OSDN Git Service

netfilter: nft_tunnel: add missing attribute validation for tunnels
authorJakub Kicinski <kuba@kernel.org>
Tue, 3 Mar 2020 05:08:33 +0000 (21:08 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 18 Mar 2020 06:14:24 +0000 (07:14 +0100)
commit5ae2daf9977a1fa4f153c20e1996ba28a54a66d1
tree32a83e8ae1c0611f3213633c93bdec84adec1e8f
parent64d43185eba6d61467db53ca026fdeb66fe78646
netfilter: nft_tunnel: add missing attribute validation for tunnels

commit 88a637719a1570705c02cacb3297af164b1714e7 upstream.

Add missing attribute validation for tunnel source and
destination ports to the netlink policy.

Fixes: af308b94a2a4 ("netfilter: nf_tables: add tunnel support")
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_tunnel.c