netfilter: xtables: ignore unassigned hooks in check_entry_size_and_hooks

Browse source

The "hook_entry" and "underflow" array contains values even for hooks
not provided, such as PREROUTING in conjunction with the "filter"
table. Usually, the values point to whatever the next rule is. For
the upcoming unconditionality and underflow checking patches however,
we must not inspect that arbitrary rule.

Skipping unassigned hooks seems like a good idea, also because
newinfo->hook_entry and newinfo->underflow will then continue to have
the poison value for detecting abnormalities.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

...

This commit is contained in:

Jan Engelhardt 2009-07-18 14:52:58 +02:00

parent 47901dc2c4

commit a7d51738e7

3 changed files with 12 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

net/ipv4/netfilter/arp_tables.c

View file

5

net/ipv4/netfilter/ip_tables.c

View file

5

net/ipv6/netfilter/ip6_tables.c

View file