diff options
| author | David S. Miller <davem@davemloft.net> | 2018-10-02 00:41:01 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2018-10-02 00:41:01 +0200 |
| commit | c8424ddd9715bf1200392a677a8a0e819c99a726 (patch) | |
| tree | fc7d7ed3992b6d21fe27c866baa4cc18b50abb81 /include | |
| parent | netlink: fix typo in nla_parse_nested() comment (diff) | |
| parent | netfilter: xt_socket: check sk before checking for netns. (diff) | |
| download | linux-c8424ddd9715bf1200392a677a8a0e819c99a726.tar.xz linux-c8424ddd9715bf1200392a677a8a0e819c99a726.zip | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for your net tree:
1) Skip ip_sabotage_in() for packet making into the VRF driver,
otherwise packets are dropped, from David Ahern.
2) Clang compilation warning uncovering typo in the
nft_validate_register_store() call from nft_osf, from Stefan Agner.
3) Double sizeof netlink message length calculations in ctnetlink,
from zhong jiang.
4) Missing rb_erase() on batch full in rbtree garbage collector,
from Taehee Yoo.
5) Calm down compilation warning in nf_hook(), from Florian Westphal.
6) Missing check for non-null sk in xt_socket before validating
netns procedence, from Flavio Leitner.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
| -rw-r--r-- | include/linux/netfilter.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/linux/netfilter.h b/include/linux/netfilter.h index 07efffd0c759..bbe99d2b28b4 100644 --- a/include/linux/netfilter.h +++ b/include/linux/netfilter.h @@ -215,6 +215,8 @@ static inline int nf_hook(u_int8_t pf, unsigned int hook, struct net *net, break; case NFPROTO_ARP: #ifdef CONFIG_NETFILTER_FAMILY_ARP + if (WARN_ON_ONCE(hook >= ARRAY_SIZE(net->nf.hooks_arp))) + break; hook_head = rcu_dereference(net->nf.hooks_arp[hook]); #endif break; |