Re: [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}
From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Date: Mon, 29 Jan 2024 23:12:23 +0100
Cc: fw@xxxxxxxxx
In-reply-to: <20240129190538.147822-1-pablo@netfilter.org>

On Mon, Jan 29, 2024 at 08:05:38PM +0100, Pablo Neira Ayuso wrote:
> Otherwise, this assigns the NULL helper. Bail out from control plane path
> if the kernel does not provide this helper.

Scratch this, help4 and help6 are set to NULL, the existing
!help4 && !help6 is sufficient.

References:
- [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}
  - From: Pablo Neira Ayuso

Prev by Date: [RFC PATCH v2 1/1] netfilter: nat: restore default DNAT behavior
Next by Date: [PATCH nf,v2] netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
Previous by thread: [PATCH nf] netfilter: nft_ct: bail out if helper is not found for NFPROTO_{IPV4,IPV6}
Next by thread: [PATCH nf-next 1/2] netfilter: nf_log: consolidate check for NULL logger in lookup function
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]

Powered by Linux