summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorJakub Kicinski <kuba@kernel.org>2020-03-02 21:08:32 -0800
committerPablo Neira Ayuso <pablo@netfilter.org>2020-03-04 02:28:17 +0100
commit9d6effb2f1523eb84516e44213c00f2fd9e6afff (patch)
tree5ddde0f3cd51d8b3335622bda815c4788de18f18 /net
parentc049b3450072b8e3998053490e025839fecfef31 (diff)
downloadlinux-9d6effb2f1523eb84516e44213c00f2fd9e6afff.tar.gz
linux-9d6effb2f1523eb84516e44213c00f2fd9e6afff.tar.bz2
linux-9d6effb2f1523eb84516e44213c00f2fd9e6afff.zip
netfilter: nft_payload: add missing attribute validation for payload csum flags
Add missing attribute validation for NFTA_PAYLOAD_CSUM_FLAGS to the netlink policy. Fixes: 1814096980bb ("netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
-rw-r--r--net/netfilter/nft_payload.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/nft_payload.c b/net/netfilter/nft_payload.c
index 1993af3a2979..a7de3a58f553 100644
--- a/net/netfilter/nft_payload.c
+++ b/net/netfilter/nft_payload.c
@@ -129,6 +129,7 @@ static const struct nla_policy nft_payload_policy[NFTA_PAYLOAD_MAX + 1] = {
[NFTA_PAYLOAD_LEN] = { .type = NLA_U32 },
[NFTA_PAYLOAD_CSUM_TYPE] = { .type = NLA_U32 },
[NFTA_PAYLOAD_CSUM_OFFSET] = { .type = NLA_U32 },
+ [NFTA_PAYLOAD_CSUM_FLAGS] = { .type = NLA_U32 },
};
static int nft_payload_init(const struct nft_ctx *ctx,