netfilter: xtables: check for standard verdicts in policies

Browse source

This adds the second check that Rusty wanted to have a long time ago. :-)

Base chain policies must have absolute verdicts that cease processing
in the table, otherwise rule execution may continue in an unexpected
spurious fashion (e.g. next chain that follows in memory).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>

...

This commit is contained in:

Jan Engelhardt 2009-07-18 15:22:30 +02:00

parent 90e7d4ab5c

commit e2fe35c17f

3 changed files with 57 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

21

net/ipv4/netfilter/arp_tables.c

View file

21

net/ipv4/netfilter/ip_tables.c

View file

21

net/ipv6/netfilter/ip6_tables.c

View file