diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-04-28 20:04:07 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-04-30 09:03:22 +0300 |
| commit | 2f768d638d977eff824f64dcc9639e3fea32da8f (patch) | |
| tree | 2c214cf5400291613bc1da42b0e1b71c8ffc53e0 /include | |
| parent | 6813985ca456d1f5677ad9554f55805cbf27e16f (diff) | |
| download | linux-2f768d638d977eff824f64dcc9639e3fea32da8f.tar.xz | |
netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate
Several matches and one target check that the hook is correct from
checkentry(), however, the basechain is only available from
nft_table_validate().
This patch uses xt_check_hooks_{match,target}() from the nft_compat
expression .validate path.
This patch sets the table in the nft_ctx struct in nft_table_validate()
which is required by this patch.
Based on patch from Florian Westphal.
Fixes: 0ca743a55991 ("netfilter: nf_tables: add compatibility layer for x_tables")
Reported-by: Xiang Mei <xmei5@asu.edu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions