Commit 88a63771 authored by Jakub Kicinski's avatar Jakub Kicinski Committed by Pablo Neira Ayuso
Browse files

netfilter: nft_tunnel: add missing attribute validation for tunnels 



Add missing attribute validation for tunnel source and
destination ports to the netlink policy.

Fixes: af308b94 ("netfilter: nf_tables: add tunnel support")
Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 9d6effb2

net/netfilter/nft_tunnel.c

+2 −0
Original line number Diff line number Diff line
@@ -339,6 +339,8 @@ static const struct nla_policy nft_tunnel_key_policy[NFTA_TUNNEL_KEY_MAX + 1] = 
	[NFTA_TUNNEL_KEY_FLAGS]	= { .type = NLA_U32, },

	[NFTA_TUNNEL_KEY_TOS]	= { .type = NLA_U8, },

	[NFTA_TUNNEL_KEY_TTL]	= { .type = NLA_U8, },

	[NFTA_TUNNEL_KEY_SPORT]	= { .type = NLA_U16, },

	[NFTA_TUNNEL_KEY_DPORT]	= { .type = NLA_U16, },

	[NFTA_TUNNEL_KEY_OPTS]	= { .type = NLA_NESTED, },

};