netfilter: ipset: Validate the set family and not the set type family at swapping (169faa2e) · Commits · 戴 / test

net/netfilter/ipset/ip_set_core.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1052,7 +1052,7 @@ ip_set_swap(struct sock ctnl, struct sk_buff skb,
		* Not an artificial restriction anymore, as we must prevent
		* possible loops created by swapping in setlist type of sets. */
		if (!(from->type->features == to->type->features &&
		from->type->family == to->type->family))
		from->family == to->family))
		return -IPSET_ERR_TYPE_MISMATCH;

		strncpy(from_name, from->name, IPSET_MAXNAMELEN);