Commit 5efa0fc6 authored Oct 18, 2016 by Florian Westphal Committed by Pablo Neira Ayuso Oct 26, 2016

netfilter: nf_tables: allow expressions to return STOLEN



Currently not supported, we'd oops as skb was (or is) free'd elsewhere.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent 0813fbc9

net/netfilter/nf_tables_core.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -178,6 +178,7 @@ next_rule:
		case NF_ACCEPT:
		case NF_DROP:
		case NF_QUEUE:
		case NF_STOLEN:
		nft_trace_packet(&info, chain, rule,
		rulenum, NFT_TRACETYPE_RULE);
		return regs.verdict.code;

Admin message