Skip to content
Commit ddc8b602 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate()



These functions are extracted from the netdev family, they initialize
the pktinfo structure and validate that the IPv4 and IPv6 headers are
well-formed given that these functions are called from a path where
layer 3 sanitization did not happen yet.

These functions are placed in include/net/netfilter/nf_tables_ipv{4,6}.h
so they can be reused by a follow up patch to use them from the bridge
family too.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 8df9e32e
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment