diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-08-07 13:02:42 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-08-07 14:19:26 +0300 |
| commit | 1dee968d22eaeb3eede70df513ab3f8dd1712e3e (patch) | |
| tree | cb037b07e45e0fe4f5f7fa6a3c512dc4772a05ac | |
| parent | f54186df806fb1e9cb262d553f4ff942f9467cf1 (diff) | |
| download | linux-1dee968d22eaeb3eede70df513ab3f8dd1712e3e.tar.xz | |
netfilter: nft_socket: remove WARN_ON_ONCE with huge level value
syzbot managed to reach this WARN_ON_ONCE by passing a huge level
value, remove it.
WARNING: CPU: 0 PID: 5853 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2f4/0x3d0 net/netfilter/nft_socket.c:220
Reported-by: syzbot+a225fea35d7baf8dbdc3@syzkaller.appspotmail.com
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rw-r--r-- | net/netfilter/nft_socket.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nft_socket.c b/net/netfilter/nft_socket.c index 35d0409b0095..36affbb697c2 100644 --- a/net/netfilter/nft_socket.c +++ b/net/netfilter/nft_socket.c @@ -217,7 +217,7 @@ static int nft_socket_init(const struct nft_ctx *ctx, level += err; /* Implies a giant cgroup tree */ - if (WARN_ON_ONCE(level > 255)) + if (level > 255) return -EOPNOTSUPP; priv->level = level; |