diff options
| author | Eric Dumazet <edumazet@google.com> | 2013-07-11 19:22:19 -0700 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-04-11 10:59:55 +0200 |
| commit | ac7685554da7a70df708f2dbb5e1fbefd81349b2 (patch) | |
| tree | 4e8ddb5de190f076890cc8fb27f608454134a0f8 /fs | |
| parent | f2a7b167e2cbffff2bb0d34ccdc464ed10e7a924 (diff) | |
netfilter: xt_socket: fix broken v0 support
commit 681f130f39e10 ("netfilter: xt_socket: add XT_SOCKET_NOWILDCARD
flag") added a potential NULL dereference if an old iptables package
uses v0 of the match.
Fix this by removing the test on @info in fast path.
IPv6 can remove the test as well, as it uses v1 or v2.
Change-Id: Ib901672c91726e788497f459fff1ea8efd12fe5b
Reported-by: Neal Cardwell <ncardwell@google.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Harout Hedeshian <harouth@codeaurora.org>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions