netfilter: nf_tables: call skb_valid_dst() before skb_dst()

Browse source

When fetching the dst_entry from the skb, check if it valid, ie. this is
not a template dst, for extensions that can be used from the netdev
ingress and egress chains.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2026-07-28 10:40:06 +02:00

parent 806273fcaf

commit 689db98e53

5 changed files with 26 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

6

net/ipv4/netfilter/nf_reject_ipv4.c

View file

8

net/ipv6/netfilter/nf_reject_ipv6.c

View file

6

net/netfilter/nft_meta.c

View file

6

net/netfilter/nft_rt.c

View file

9

net/netfilter/nft_xfrm.c

View file