summaryrefslogtreecommitdiff
path: root/net/sched
diff options
context:
space:
mode:
authorwenxu <wenxu@ucloud.cn>2021-07-02 06:34:31 +0300
committerDavid S. Miller <davem@davemloft.net>2021-07-02 22:07:08 +0300
commit8955b90c3cdad199137809aac8ccbbb585355913 (patch)
treed8cf6d08be8bb0bc1c84b0b676ff6ecc48db515e /net/sched
parent1bfa4d0cb5adf954e0f4870a3ecb7cb19506320c (diff)
downloadlinux-8955b90c3cdad199137809aac8ccbbb585355913.tar.xz
net/sched: act_ct: fix err check for nf_conntrack_confirm
The confirm operation should be checked. If there are any failed, the packet should be dropped like in ovs and netfilter. Fixes: b57dc7c13ea9 ("net/sched: Introduce action ct") Signed-off-by: wenxu <wenxu@ucloud.cn> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched')
-rw-r--r--net/sched/act_ct.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/net/sched/act_ct.c b/net/sched/act_ct.c
index a656baa321fe..a62f404d0e16 100644
--- a/net/sched/act_ct.c
+++ b/net/sched/act_ct.c
@@ -1026,7 +1026,8 @@ do_nat:
/* This will take care of sending queued events
* even if the connection is already confirmed.
*/
- nf_conntrack_confirm(skb);
+ if (nf_conntrack_confirm(skb) != NF_ACCEPT)
+ goto drop;
}
if (!skip_add)