Pablo Neira Ayuso 0d2c96af79 netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
Userspace might bogusly sent NFT_DATA_VERDICT in several netlink
attributes that assume NFT_DATA_VALUE. Moreover, make sure that error
path invokes nft_data_release() to decrement the reference count on the
chain object.

Fixes: 96518518cc41 ("netfilter: add nftables")
Fixes: 0f3cd9b36977 ("netfilter: nf_tables: add range expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2019-12-09 13:14:03 +01:00
..
2019-09-27 15:10:34 -07:00
2019-11-18 19:32:59 -08:00
2019-07-12 16:03:16 -07:00
2019-09-26 08:56:17 +02:00
2019-10-24 14:53:48 -07:00
2019-11-27 11:06:20 -08:00
2019-11-26 14:40:13 -08:00
2019-11-05 18:25:54 +01:00
2019-11-26 10:03:12 -08:00
2019-11-08 11:36:48 -08:00
2019-11-24 16:58:44 -08:00