tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
fork atom

[NETFILTER]: ipt action: use xt_check_target for basic verification

The targets don't do the basic verification themselves anymore so
the ipt action needs to take care of it.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by Patrick McHardy and committed by David S. Miller 18118cdb 91536b7a

+5
unified split
+5
net/sched/act_ipt.c
··· 69 DPRINTK("ipt_init_target: found %s\n", target->name); 70 t->u.kernel.target = target; 71 72 if (t->u.kernel.target->checkentry 73 && !t->u.kernel.target->checkentry(table, NULL, 74 t->u.kernel.target, t->data,
··· 69 DPRINTK("ipt_init_target: found %s\n", target->name); 70 t->u.kernel.target = target; 71 72 + ret = xt_check_target(target, AF_INET, t->u.target_size - sizeof(*t), 73 + table, hook, 0, 0); 74 + if (ret) 75 + return ret; 76 + 77 if (t->u.kernel.target->checkentry 78 && !t->u.kernel.target->checkentry(table, NULL, 79 t->u.kernel.target, t->data,