summaryrefslogtreecommitdiff
path: root/init
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2016-04-11 23:31:14 (GMT)
committerPablo Neira Ayuso <pablo@netfilter.org>2016-04-12 23:16:57 (GMT)
commitbcf4934288402be3464110109a4dae3bd6fb3e93 (patch)
treebc56faa21bf6d61dd7b94f302c828ef0a50185c9 /init
parent644c7e48cb59cfc6988ddc7bf3d3b1ba5fe7fa9d (diff)
downloadlinux-bcf4934288402be3464110109a4dae3bd6fb3e93.tar.xz
netfilter: ebtables: Fix extension lookup with identical name
If a requested extension exists as module and is not loaded, ebt_check_match() might accidentally use an NFPROTO_UNSPEC one with same name and fail. Reproduced with limit match: Given xt_limit and ebt_limit both built as module, the following would fail: modprobe xt_limit ebtables -I INPUT --limit 1/s -j ACCEPT The fix is to make ebt_check_match() distrust a found NFPROTO_UNSPEC extension and retry after requesting an appropriate module. Cc: Florian Westphal <fw@strlen.de> Signed-off-by: Phil Sutter <phil@nwl.cc> Acked-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions