iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4f7ade415291d187d61f34fd85e925bbd96d1f47
linux/net/netfilter
History
Pablo Neira Ayuso eb4274d043 netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type 
commit d9583cdf2f upstream.

EINVAL should be used for malformed netlink messages. New userspace
utility and old kernels might easily result in EINVAL when exercising
new set features, which is misleading.

Fixes: 8aeff920dc ("netfilter: nf_tables: add stateful object reference to set elements")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-24 08:01:01 +02:00
..
ipset
netfilter: ipset: use bitmap infrastructure completely
2020-01-29 15:02:39 +01:00
ipvs
net: add bool confirm_neigh parameter for dst_ops.update_pmtu
2020-01-04 14:00:14 +01:00
core.c
netfilter: core: remove erroneous warn_on
2017-09-08 18:55:52 +02:00
Kconfig
netfilter: nf_tables: add fib expression to the netdev family
2017-07-31 19:01:40 +02:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
nf_conntrack_acct.c
netfilter: conntrack: mark extension structs as const
2017-04-26 09:30:22 +02:00
nf_conntrack_amanda.c
netfilter: use nf_conntrack_helpers_register when possible
2017-06-19 19:13:21 +02:00
nf_conntrack_broadcast.c
netfilter: Remove duplicated rcu_read_lock.
2017-07-24 13:24:46 +02:00
nf_conntrack_core.c
netfilter: nf_conntrack: resolve clash for matching conntracks
2020-03-11 18:02:42 +01:00
nf_conntrack_ecache.c
netfilter: conntrack: mark extension structs as const
2017-04-26 09:30:22 +02:00
nf_conntrack_expect.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
nf_conntrack_extend.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
nf_conntrack_ftp.c
netfilter: nf_conntrack_ftp: Fix debug output
2019-09-21 07:15:36 +02:00
nf_conntrack_h323_asn1.c
netfilter: nf_conntrack_h323: fix off-by-one in DecodeQ931
2016-07-11 12:32:45 +02:00
nf_conntrack_h323_main.c
netfilter: use nf_conntrack_helpers_register when possible
2017-06-19 19:13:21 +02:00
nf_conntrack_h323_types.c
…
nf_conntrack_helper.c
netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregister
2018-08-24 13:08:57 +02:00
nf_conntrack_irc.c
netfilter: helpers: remove data_len usage for inkernel helpers
2017-04-19 17:55:17 +02:00
nf_conntrack_l3proto_generic.c
netfilter: conntrack: place print_tuple in procfs part
2017-08-24 18:52:32 +02:00
nf_conntrack_labels.c
netfilter: conntrack: mark extension structs as const
2017-04-26 09:30:22 +02:00
nf_conntrack_netbios_ns.c
netfilter: helper: add build-time asserts for helper data size
2017-04-19 17:55:16 +02:00
nf_conntrack_netlink.c
netfilter: ctnetlink: netns exit must wait for callbacks
2020-01-12 12:11:49 +01:00
nf_conntrack_pptp.c
netfilter: Remove duplicated rcu_read_lock.
2017-07-24 13:24:46 +02:00
nf_conntrack_proto_dccp.c
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
2018-08-24 13:09:22 +02:00
nf_conntrack_proto_generic.c
netfilter: remove unused hooknum arg from packet functions
2017-09-04 13:25:18 +02:00
nf_conntrack_proto_gre.c
netfilter: remove unused hooknum arg from packet functions
2017-09-04 13:25:18 +02:00
nf_conntrack_proto_sctp.c
netfilter: remove unused hooknum arg from packet functions
2017-09-04 13:25:18 +02:00
nf_conntrack_proto_tcp.c
netfilter: remove unused hooknum arg from packet functions
2017-09-04 13:25:18 +02:00
nf_conntrack_proto_udp.c
netfilter: remove unused hooknum arg from packet functions
2017-09-04 13:25:18 +02:00
nf_conntrack_proto.c
netfilter: conntrack: make protocol tracker pointers const
2017-08-24 18:52:33 +02:00
nf_conntrack_sane.c
netfilter: helpers: remove data_len usage for inkernel helpers
2017-04-19 17:55:17 +02:00
nf_conntrack_seqadj.c
netfilter: seqadj: re-load tcp header pointer after possible head reallocation
2019-01-13 10:00:57 +01:00
nf_conntrack_sip.c
netfilter: Remove duplicated rcu_read_lock.
2017-07-24 13:24:46 +02:00
nf_conntrack_snmp.c
…
nf_conntrack_standalone.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
nf_conntrack_tftp.c
netfilter: helpers: remove data_len usage for inkernel helpers
2017-04-19 17:55:17 +02:00
nf_conntrack_timeout.c
netfilter: conntrack: mark extension structs as const
2017-04-26 09:30:22 +02:00
nf_conntrack_timestamp.c
netfilter: conntrack: mark extension structs as const
2017-04-26 09:30:22 +02:00
nf_dup_netdev.c
netfilter: dup: resolve warnings about missing prototypes
2017-05-29 11:32:36 +02:00
nf_internals.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
nf_log_common.c
netfilter: nf_log: do not assume ethernet header in netdev family
2016-12-04 20:45:33 +01:00
nf_log_netdev.c
netfilter: nf_log: do not assume ethernet header in netdev family
2016-12-04 20:45:33 +01:00
nf_log.c
netfilter: nf_log: fix uninit read in nf_log_proc_dostring
2018-08-24 13:09:07 +02:00
nf_nat_amanda.c
netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean
2017-04-06 22:01:38 +02:00
nf_nat_core.c
netfilter: nat: can't use dst_hold on noref dst
2019-01-13 10:00:58 +01:00
nf_nat_ftp.c
…
nf_nat_helper.c
netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean
2017-04-06 22:01:38 +02:00
nf_nat_irc.c
netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean
2017-04-06 22:01:38 +02:00
nf_nat_proto_common.c
netfilter: nat: cope with negative port range
2018-03-15 10:54:23 +01:00
nf_nat_proto_dccp.c
netfilter: built-in NAT support for DCCP
2016-12-04 20:45:30 +01:00
nf_nat_proto_sctp.c
sctp: remove the typedef sctp_sctphdr_t
2017-07-01 09:08:41 -07:00
nf_nat_proto_tcp.c
net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool
2015-08-17 21:33:06 -07:00
nf_nat_proto_udp.c
netfilter: nat: merge udp and udplite helpers
2017-01-03 14:33:25 +01:00
nf_nat_proto_unknown.c
…
nf_nat_redirect.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
nf_nat_sip.c
…
nf_nat_tftp.c
…
nf_queue.c
netfilter: nf_queue: enqueue skbs with NULL dst
2020-01-04 13:59:59 +01:00
nf_sockopt.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
nf_synproxy_core.c
tcp: switch TCP TS option (RFC 7323) to 1ms clock
2017-05-17 16:06:01 -04:00
nf_tables_api.c
netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
2020-04-24 08:01:01 +02:00
nf_tables_core.c
netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()
2018-07-08 15:30:50 +02:00
nf_tables_inet.c
netfilter: Add the missed return value check of nft_register_chain_type
2016-09-12 19:54:45 +02:00
nf_tables_netdev.c
netfilter: nf_tables: add nft_is_base_chain() helper
2017-04-06 18:32:04 +02:00
nf_tables_trace.c
netfilter: nf_tables: Allow chain name of up to 255 chars
2017-07-31 20:41:57 +02:00
nfnetlink_acct.c
netfilter: fix memory leaks on netlink_dump_start error
2018-09-15 09:45:28 +02:00
nfnetlink_cthelper.c
netfilter: cthelper: add missing attribute validation for cthelper
2020-03-20 10:54:19 +01:00
nfnetlink_cttimeout.c
netfilter: conntrack: make protocol tracker pointers const
2017-08-24 18:52:33 +02:00
nfnetlink_log.c
netfilter: constify nf_loginfo structures
2017-08-02 14:25:59 +02:00
nfnetlink_queue.c
netfilter: nf_queue: augment nfqa_cfg_policy
2018-07-17 11:39:32 +02:00
nfnetlink.c
netfilter: nfnetlink: avoid deadlock due to synchronous request_module
2019-08-16 10:13:50 +02:00
nft_bitwise.c
netfilter: nf_tables: revisit chain/object refcounting from elements
2017-05-15 12:51:41 +02:00
nft_byteorder.c
netfilter: nf_tables: simplify the basic expressions' init routine
2016-11-09 23:42:23 +01:00
nft_cmp.c
netfilter: nf_tables: revisit chain/object refcounting from elements
2017-05-15 12:51:41 +02:00
nft_compat.c
netfilter: nft_compat: do not dump private area
2019-11-24 08:23:32 +01:00
nft_counter.c
netfilter: nf_tables: add select_ops for stateful objects
2017-09-04 13:25:09 +02:00
nft_ct.c
netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()
2018-06-16 09:45:14 +02:00
nft_dup_netdev.c
netfilter: nf_tables: add packet duplication to the netdev family
2016-01-03 21:04:23 +01:00
nft_dynset.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
2017-05-03 10:11:26 -04:00
nft_exthdr.c
netfilter: fix a few (harmless) sparse warnings
2017-08-28 17:42:56 +02:00
nft_fib_inet.c
netfilter: nf_tables: use hook state from xt_action_param structure
2016-11-03 11:52:34 +01:00
nft_fib_netdev.c
netfilter: nf_tables: add fib expression to the netdev family
2017-07-31 19:01:40 +02:00
nft_fib.c
netfilter: nft_fib: Support existence check
2017-03-13 13:45:36 +01:00
nft_fwd_netdev.c
netfilter: nft_fwd_netdev: validate family and chain type
2020-04-02 16:34:32 +02:00
nft_hash.c
netfilter: nft_hash: fix symhash with modulus one
2019-08-16 10:13:51 +02:00
nft_immediate.c
netfilter: nf_tables: bogus EBUSY in chain deletions
2018-07-08 15:30:49 +02:00
nft_limit.c
netfilter: nft_limit: fix packet ratelimiting
2018-07-08 15:30:51 +02:00
nft_log.c
netfilter: nft_log: restrict the log prefix length to 127
2017-01-24 21:46:29 +01:00
nft_lookup.c
netfilter: nf_tables: allow lookups in dynamic sets
2019-10-11 18:18:39 +02:00
nft_masq.c
netfilter: nf_tables: validate the expr explicitly after init successfully
2017-03-06 18:22:12 +01:00
nft_meta.c
netfilter: nft_meta: fix wrong value dereference in nft_meta_set_eval
2018-07-08 15:30:49 +02:00
nft_nat.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-03-23 16:41:27 -07:00
nft_numgen.c
netfilter: Remove exceptional & on function name
2017-04-07 18:24:47 +02:00
nft_objref.c
netfilter: nf_tables: add select_ops for stateful objects
2017-09-04 13:25:09 +02:00
nft_payload.c
netfilter: nft_payload: add missing attribute validation for payload csum flags
2020-03-20 10:54:19 +01:00
nft_queue.c
netfilter: Remove exceptional & on function name
2017-04-07 18:24:47 +02:00
nft_quota.c
netfilter: nf_tables: add select_ops for stateful objects
2017-09-04 13:25:09 +02:00
nft_range.c
netfilter: nf_tables: revisit chain/object refcounting from elements
2017-05-15 12:51:41 +02:00
nft_redir.c
netfilter: nf_tables: validate the expr explicitly after init successfully
2017-03-06 18:22:12 +01:00
nft_reject_inet.c
netfilter: nf_tables: validate the expr explicitly after init successfully
2017-03-06 18:22:12 +01:00
nft_reject.c
netfilter: nf_tables: validate the expr explicitly after init successfully
2017-03-06 18:22:12 +01:00
nft_rt.c
netfilter: rt: account for tcp header size too
2017-08-28 18:14:30 +02:00
nft_set_bitmap.c
netfilter: nf_tables: pass set description to ->privsize
2017-05-29 12:46:18 +02:00
nft_set_hash.c
netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
2020-01-27 14:46:23 +01:00
nft_set_rbtree.c
netfilter: nft_set_rbtree: check for inactive element after flag mismatch
2019-05-04 09:15:18 +02:00
x_tables.c
netfilter: compat: initialize all fields in xt_init
2019-05-16 19:42:18 +02:00
xt_addrtype.c
netfilter: Remove duplicated rcu_read_lock.
2017-07-24 13:24:46 +02:00
xt_AUDIT.c
audit: normalize NETFILTER_PKT
2017-05-02 10:16:04 -04:00
xt_bpf.c
netfilter: xt_bpf: add overflow checks
2018-02-25 11:08:01 +01:00
xt_cgroup.c
netfilter: xt_cgroup: shrink size of v2 path
2019-04-20 09:15:04 +02:00
xt_CHECKSUM.c
…
xt_CLASSIFY.c
…
xt_cluster.c
netfilter: xt_cluster: add dependency on conntrack module
2018-10-10 08:54:23 +02:00
xt_comment.c
…
xt_connbytes.c
netfilter: add and use nf_ct_netns_get/put
2016-12-04 21:16:50 +01:00
xt_connlabel.c
netfilter: remove nf_ct_is_untracked
2017-04-15 11:51:33 +02:00
xt_connlimit.c
netfilter: nf_conncount: don't skip eviction when age is negative
2019-01-09 17:14:51 +01:00
xt_connmark.c
netfilter: remove nf_ct_is_untracked
2017-04-15 11:51:33 +02:00
xt_CONNSECMARK.c
netfilter: add and use nf_ct_netns_get/put
2016-12-04 21:16:50 +01:00
xt_conntrack.c
netfilter: kill the fake untracked conntrack objects
2017-04-15 11:47:57 +02:00
xt_cpu.c
…
xt_CT.c
netfilter: conntrack: make protocol tracker pointers const
2017-08-24 18:52:33 +02:00
xt_dccp.c
…
xt_devgroup.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_dscp.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_DSCP.c
…
xt_ecn.c
…
xt_esp.c
…
xt_hashlimit.c
netfilter: xt_hashlimit: limit the max size of hashtable
2020-02-28 16:36:16 +01:00
xt_helper.c
netfilter: add and use nf_ct_netns_get/put
2016-12-04 21:16:50 +01:00
xt_hl.c
…
xt_HL.c
…
xt_HMARK.c
netfilter: remove nf_ct_is_untracked
2017-04-15 11:51:33 +02:00
xt_IDLETIMER.c
netfilter: xt_IDLETIMER: add sysfs filename checking routine
2018-11-27 16:10:48 +01:00
xt_ipcomp.c
netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias name
2016-10-17 17:38:19 +02:00
xt_iprange.c
…
xt_ipvs.c
netfilter: remove nf_ct_is_untracked
2017-04-15 11:51:33 +02:00
xt_l2tp.c
…
xt_LED.c
netfilter: x_tables: fix pointer leaks to userspace
2018-04-26 11:02:13 +02:00
xt_length.c
…
xt_limit.c
netfilter: x_tables: fix pointer leaks to userspace
2018-04-26 11:02:13 +02:00
xt_LOG.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_mac.c
…
xt_mark.c
…
xt_multiport.c
netfilter: xt_multiport: Fix wrong unmatch result with multiple ports
2016-12-06 21:48:20 +01:00
xt_nat.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
xt_NETMAP.c
net: Replace NF_CT_ASSERT() with WARN_ON().
2017-09-04 13:25:19 +02:00
xt_nfacct.c
netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
2019-09-21 07:15:32 +02:00
xt_NFLOG.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_NFQUEUE.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_osf.c
netfilter: xt_osf: Add missing permission checks
2018-01-31 14:03:41 +01:00
xt_owner.c
sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>
2017-03-02 08:42:31 +01:00
xt_physdev.c
netfilter: physdev: relax br_netfilter dependency
2019-04-05 22:31:39 +02:00
xt_pkttype.c
netfilter: pkttype: unnecessary to check ipv6 multicast address
2017-01-18 20:32:43 +01:00
xt_policy.c
netfilter: x_tables: move hook state into xt_action_param structure
2016-11-03 10:56:21 +01:00
xt_quota.c
xtables: extend matches and targets with .usersize
2017-01-09 17:24:55 +01:00
xt_rateest.c
xtables: extend matches and targets with .usersize
2017-01-09 17:24:55 +01:00
xt_RATEEST.c
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
2018-02-25 11:07:50 +01:00
xt_realm.c
…
xt_recent.c
netfilter: x_tables: add and use xt_check_proc_name
2018-04-08 14:26:29 +02:00
xt_REDIRECT.c
netfilter: nat: add dependencies on conntrack module
2016-12-04 21:16:51 +01:00
xt_repldata.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xt_sctp.c
sctp: remove the typedef sctp_chunkhdr_t
2017-07-01 09:08:41 -07:00
xt_SECMARK.c
…
xt_set.c
netfilter: ipset: Improve skbinfo get/init helpers
2016-11-10 13:28:42 +01:00
xt_socket.c
netfilter: xt_socket: Restore mark from full sockets only
2017-09-26 20:04:34 +02:00
xt_state.c
netfilter: kill the fake untracked conntrack objects
2017-04-15 11:47:57 +02:00
xt_statistic.c
netfilter: x_tables: fix pointer leaks to userspace
2018-04-26 11:02:13 +02:00
xt_string.c
xtables: extend matches and targets with .usersize
2017-01-09 17:24:55 +01:00
xt_tcpmss.c
…
xt_TCPMSS.c
netfilter: Remove duplicated rcu_read_lock.
2017-07-24 13:24:46 +02:00
xt_TCPOPTSTRIP.c
net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool
2015-08-17 21:33:06 -07:00
xt_tcpudp.c
netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF
2016-07-03 10:55:07 +02:00
xt_TEE.c
xtables: extend matches and targets with .usersize
2017-01-09 17:24:55 +01:00
xt_time.c
ktime: Get rid of the union
2016-12-25 17:21:22 +01:00
xt_TPROXY.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
2017-09-03 17:08:42 -07:00
xt_TRACE.c
netfilter: xt_TRACE: add explicitly nf_logger_find_get call
2016-06-23 13:26:49 +02:00
xt_u32.c
…