diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-03-27 14:14:13 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-04-01 12:33:00 +0300 |
| commit | c5035c77f89364d2da2871d829553bd1a4321940 (patch) | |
| tree | d403a5f3f17acf2b1e0dc7946937dc008026072d /net/netfilter/xt_socket.c | |
| parent | afb7718016fcb0370ac29a83b2839c78b76c2960 (diff) | |
| download | linux-c5035c77f89364d2da2871d829553bd1a4321940.tar.xz | |
netfilter: nft_meta: fix cgroup matching
We have to stop iterating on the rule expressions if the cgroup
mismatches. Moreover, make sure a non-full socket from the input path
leads us to a crash.
Fixes: ce67417 ("netfilter: nft_meta: add cgroup support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/xt_socket.c')
0 files changed, 0 insertions, 0 deletions