diff options
| author | Liping Zhang | 2016-11-23 15:12:21 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2016-12-06 21:42:21 +0100 |
| commit | e0ffdbc78d84e1da090f03ab62da3def0e65159e (patch) | |
| tree | c93f76d2219fe8b7da2c3e18a958b2c6b6ba3074 /net/netfilter/nft_payload.c | |
| parent | netfilter: nft_fib: convert htonl to ntohl properly (diff) | |
| download | kernel-qcow2-linux-e0ffdbc78d84e1da090f03ab62da3def0e65159e.tar.gz kernel-qcow2-linux-e0ffdbc78d84e1da090f03ab62da3def0e65159e.tar.xz kernel-qcow2-linux-e0ffdbc78d84e1da090f03ab62da3def0e65159e.zip | |
netfilter: nft_fib_ipv4: initialize *dest to zero
Otherwise, if fib lookup fail, *dest will be filled with garbage value,
so reverse path filtering will not work properly:
# nft add rule x prerouting fib saddr oif eq 0 drop
Fixes: f6d0cbcf09c5 ("netfilter: nf_tables: add fib expression")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_payload.c')
0 files changed, 0 insertions, 0 deletions