summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorLaura Garcia Liebana <nevola@gmail.com>2019-07-15 13:23:37 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2019-07-16 13:17:03 +0200
commit28b1d6ef53e3303b90ca8924bb78f31fa527cafb (patch)
tree6ee9c1f3988d66733dd8d9451748dee603d8a99e /net
parentnetfilter: nf_tables: don't fail when updating base chain policy (diff)
downloadlinux-28b1d6ef53e3303b90ca8924bb78f31fa527cafb.tar.xz
linux-28b1d6ef53e3303b90ca8924bb78f31fa527cafb.zip
netfilter: nft_hash: fix symhash with modulus one
The rule below doesn't work as the kernel raises -ERANGE. nft add rule netdev nftlb lb01 ip daddr set \ symhash mod 1 map { 0 : 192.168.0.10 } fwd to "eth0" This patch allows to use the symhash modulus with one element, in the same way that the other types of hashes and algorithms that uses the modulus parameter. Signed-off-by: Laura Garcia Liebana <nevola@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
-rw-r--r--net/netfilter/nft_hash.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nft_hash.c b/net/netfilter/nft_hash.c
index fe93e731dc7f..b836d550b919 100644
--- a/net/netfilter/nft_hash.c
+++ b/net/netfilter/nft_hash.c
@@ -129,7 +129,7 @@ static int nft_symhash_init(const struct nft_ctx *ctx,
priv->dreg = nft_parse_register(tb[NFTA_HASH_DREG]);
priv->modulus = ntohl(nla_get_be32(tb[NFTA_HASH_MODULUS]));
- if (priv->modulus <= 1)
+ if (priv->modulus < 1)
return -ERANGE;
if (priv->offset + priv->modulus - 1 < priv->offset)