Commit 23185c6a authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Florian Westphal
Browse files

netfilter: nft_dynset: disallow object maps 



Do not allow to insert elements from datapath to objects maps.

Fixes: 8aeff920 ("netfilter: nf_tables: add stateful object reference to set elements")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
parent 02c6c244

net/netfilter/nft_dynset.c

+3 −0
Original line number Diff line number Diff line
@@ -191,6 +191,9 @@ static int nft_dynset_init(const struct nft_ctx *ctx, 
	if (IS_ERR(set))

		return PTR_ERR(set);



	if (set->flags & NFT_SET_OBJECT)

		return -EOPNOTSUPP;



	if (set->ops->update == NULL)

		return -EOPNOTSUPP;