| commit | 282fd1fb2ff8f2f1b722903d8af844ef346424c1 | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Mar 23 14:27:16 2020 +0100 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Thu Apr 02 17:20:35 2020 +0200 |
| tree | 38f229526e000432456b7904c6b931b43dd6fb66 | |
| parent | 86e98ce7de083649e330d518e98a80b9e39b5d43 [diff] |
netfilter: nft_fwd_netdev: validate family and chain type
commit 76a109fac206e158eb3c967af98c178cff738e6a upstream.
Make sure the forward action is only used from ingress.
Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>