Florian Westphal 07a9da51b4 netfilter: x_tables: check standard verdicts in core
Userspace must provide a valid verdict to the standard target.

The verdict can be either a jump (signed int > 0), or a return code.

Allowed return codes are either RETURN (pop from stack), NF_ACCEPT, DROP
and QUEUE (latter is allowed for legacy reasons).

Jump offsets (verdict > 0) are checked in more detail later on when
loop-detection is performed.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2018-03-05 23:15:43 +01:00
..
2018-02-27 11:01:39 -05:00
2018-02-19 14:19:09 -05:00
2018-03-04 13:04:22 -05:00
2018-02-28 11:43:28 -05:00
2017-05-21 13:42:36 -04:00
2018-03-04 13:04:22 -05:00
2018-03-01 13:13:23 -05:00
2018-03-04 13:04:22 -05:00
2018-03-01 13:13:23 -05:00
2018-02-28 11:43:28 -05:00
2018-03-04 13:04:22 -05:00
2016-12-25 17:21:23 +01:00
2018-02-19 14:19:11 -05:00
2018-02-28 11:43:28 -05:00
2018-02-19 14:19:11 -05:00
2017-09-01 18:35:23 -07:00
2018-02-27 11:01:38 -05:00
2018-02-19 14:19:10 -05:00
2018-01-16 15:01:33 -05:00
2018-02-19 14:19:11 -05:00
2018-02-28 11:43:28 -05:00