Commit 10670abe authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Greg Kroah-Hartman
Browse files

netfilter: nft_exthdr: break evaluation if setting TCP option fails 



[ Upstream commit 962e5a40 ]

Break rule evaluation on malformed TCP options.

Fixes: 99d1712b ("netfilter: exthdr: tcp option set support")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Stable-dep-of: 28427f36 ("netfilter: nft_exthdr: Fix non-linear header modification")
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent 45b3eb6a
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment