Re: [nft PATCH v3] evaluate: fix a crash if we specify ether type or meta nfproto in reject

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Oct 20, 2014 at 03:32:09PM +0200, Alvaro Neira Ayuso wrote:
> If we use this rule:
> 
> nft add rule bridge filter input \
> 	ether type ip reject with icmp type host-unreachable
> 
> or that:
> 
> nft add rule inet filter input \
> 	meta nfproto ipv4 reject with icmp type host-unreachable
> 
> we have a segfault because we add a network dependency when we already have
> network context.

Applied, thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux