* in nfnetlink_acct.c::nfnl_acct_new enforce a check ensuring that packet and byte values are specified simultaneously - return -EINVAL if that is not the case. Signed-off-by: Michael Zintakis <michael.zintakis@xxxxxxxxxxxxxx> --- net/netfilter/nfnetlink_acct.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/net/netfilter/nfnetlink_acct.c b/net/netfilter/nfnetlink_acct.c index c7b6d46..526abd7 100644 --- a/net/netfilter/nfnetlink_acct.c +++ b/net/netfilter/nfnetlink_acct.c @@ -45,7 +45,9 @@ nfnl_acct_new(struct sock *nfnl, struct sk_buff *skb, struct nf_acct *nfacct, *matching = NULL; char *acct_name; - if (!tb[NFACCT_NAME]) + if (!tb[NFACCT_NAME] || + (tb[NFACCT_BYTES] && !tb[NFACCT_PKTS]) || + (!tb[NFACCT_BYTES] && tb[NFACCT_PKTS])) return -EINVAL; acct_name = nla_data(tb[NFACCT_NAME]); -- 1.8.3.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
