netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate()

Browse source

These functions are extracted from the netdev family, they initialize
the pktinfo structure and validate that the IPv4 and IPv6 headers are
well-formed given that these functions are called from a path where
layer 3 sanitization did not happen yet.

These functions are placed in include/net/netfilter/nf_tables_ipv{4,6}.h
so they can be reused by a follow up patch to use them from the bridge
family too.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2016-09-09 12:42:51 +02:00

parent 8df9e32e7e

commit ddc8b6027a

3 changed files with 93 additions and 77 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

42

include/net/netfilter/nf_tables_ipv4.h

View file

49

include/net/netfilter/nf_tables_ipv6.h

View file