summaryrefslogtreecommitdiffstats
path: root/net/netfilter
diff options
context:
space:
mode:
authorMáté Eckl <ecklm94@gmail.com>2018-08-02 21:18:31 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2018-08-03 20:20:53 +0200
commit033eab53fff7acc0f5718dee6fda641734b94416 (patch)
treef70ef7b48ead5898cfbea8c5126a591a703b3e60 /net/netfilter
parentc75303269009667cc2b7ddee274bc9e96e840f57 (diff)
downloadlinux-stable-033eab53fff7acc0f5718dee6fda641734b94416.tar.gz
linux-stable-033eab53fff7acc0f5718dee6fda641734b94416.tar.bz2
linux-stable-033eab53fff7acc0f5718dee6fda641734b94416.zip
netfilter: nft_tproxy: Add missing config check
A config check was missing form the code when using nf_defrag_ipv6_enable with NFT_TPROXY != n and NF_DEFRAG_IPV6 = n and this caused the following error: ../net/netfilter/nft_tproxy.c: In function 'nft_tproxy_init': ../net/netfilter/nft_tproxy.c:237:3: error: implicit declaration of function +'nf_defrag_ipv6_enable' [-Werror=implicit-function-declaration] err = nf_defrag_ipv6_enable(ctx->net); This patch adds a check for NF_TABLES_IPV6 when NF_DEFRAG_IPV6 is selected by Kconfig. Reported-by: Randy Dunlap <rdunlap@infradead.org> Fixes: 4ed8eb6570a4 ("netfilter: nf_tables: Add native tproxy support") Signed-off-by: Máté Eckl <ecklm94@gmail.com> Acked-by: Randy Dunlap <rdunlap@infradead.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter')
-rw-r--r--net/netfilter/nft_tproxy.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/net/netfilter/nft_tproxy.c b/net/netfilter/nft_tproxy.c
index c6845f7baa08..eff99dffc842 100644
--- a/net/netfilter/nft_tproxy.c
+++ b/net/netfilter/nft_tproxy.c
@@ -234,9 +234,11 @@ static int nft_tproxy_init(const struct nft_ctx *ctx,
err = nf_defrag_ipv4_enable(ctx->net);
if (err)
return err;
+#if IS_ENABLED(CONFIG_NF_TABLES_IPV6)
err = nf_defrag_ipv6_enable(ctx->net);
if (err)
return err;
+#endif
break;
default:
return -EOPNOTSUPP;