diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-03-01 00:11:10 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-03-07 00:02:42 +0100 |
| commit | 16603605b667b70da974bea8216c93e7db043bf1 (patch) | |
| tree | a3347212f629d997b3dfae2a0dfa9f53f6492eab /drivers/net/ethernet/intel/igc | |
| parent | c055fc00c07be1f0df7375ab0036cebd1106ed38 (diff) | |
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this.
Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
Cc: stable@vger.kernel.org
Fixes: 761da2935d6e ("netfilter: nf_tables: add set timeout API support")
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'drivers/net/ethernet/intel/igc')
0 files changed, 0 insertions, 0 deletions