Commit 1bc4e013 authored Jul 18, 2016 by Liping Zhang Committed by Pablo Neira Ayuso Jul 21, 2016

netfilter: nft_log: check the validity of log level



User can specify the log level larger than 7(debug level) via
nfnetlink, this is invalid. So in this case, we should report
EINVAL to the userspace.

Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent c2d9a429

net/netfilter/nft_log.c

+5 −0

Original line number	Diff line number	Diff line
		@@ -79,6 +79,11 @@ static int nft_log_init(const struct nft_ctx *ctx,
		} else {
		li->u.log.level = LOGLEVEL_WARNING;
		}
		if (li->u.log.level > LOGLEVEL_DEBUG) {
		err = -EINVAL;
		goto err1;
		}

		if (tb[NFTA_LOG_FLAGS] != NULL) {
		li->u.log.logflags =
		ntohl(nla_get_be32(tb[NFTA_LOG_FLAGS]));

Admin message