diff options
| author | Florian Westphal <fw@strlen.de> | 2022-07-26 20:49:00 +0300 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2022-07-26 22:12:42 +0300 |
| commit | 47f4f510ad586032b85c89a0773fbb011d412425 (patch) | |
| tree | 7b5cf8909cb4ea535ab69853e72ce215947faed0 /scripts/gdb/linux/utils.py | |
| parent | 81ea010667417ef3f218dfd99b69769fe66c2b67 (diff) | |
| download | linux-47f4f510ad586032b85c89a0773fbb011d412425.tar.xz | |
netfilter: nft_queue: only allow supported familes and hooks
Trying to use 'queue' statement in ingress (for example)
triggers a splat on reinject:
WARNING: CPU: 3 PID: 1345 at net/netfilter/nf_queue.c:291
... because nf_reinject cannot find the ruleset head.
The netdev family doesn't support async resume at the moment anyway,
so disallow loading such rulesets with a more appropriate
error message.
v2: add 'validate' callback and also check hook points, v1 did
allow ingress use in 'table inet', but that doesn't work either. (Pablo)
Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/gdb/linux/utils.py')
0 files changed, 0 insertions, 0 deletions