diff options
| author | wenxu <wenxu@ucloud.cn> | 2019-10-24 10:52:45 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-10-24 13:27:29 +0300 |
| commit | a69a85da458f79088c38a38db034a4d64d9c32c3 (patch) | |
| tree | 0ce824f5991bbcb5d74c5a8e220395c457f3318c /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | 085461c8976e6cb4d5b608a7b7062f394c51a253 (diff) | |
| download | linux-a69a85da458f79088c38a38db034a4d64d9c32c3.tar.xz | |
netfilter: nft_payload: fix missing check for matching length in offloads
Payload offload rule should also check the length of the match.
Moreover, check for unsupported link-layer fields:
nft --debug=netlink add rule firewall zones vlan id 100
...
[ payload load 2b @ link header + 0 => reg 1 ]
this loads 2byte base on ll header and offset 0.
This also fixes unsupported raw payload match.
Fixes: 92ad6325cb89 ("netfilter: nf_tables: add hardware offload support")
Signed-off-by: wenxu <wenxu@ucloud.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions