netfilter: xtables: ignore unassigned hooks in check_entry_size_and_hooks
authorJan Engelhardt <jengelh@medozas.de>
Sat, 18 Jul 2009 12:52:58 +0000 (14:52 +0200)
committerJan Engelhardt <jengelh@medozas.de>
Mon, 10 Aug 2009 11:35:28 +0000 (13:35 +0200)
commita7d51738e757c1ab94595e7d05594c61f0fb32ce
treeaf862be9cb71bf2ef66cd7fb72ed582428ccbc1d
parent47901dc2c4a3f1f9af453486a005d31fe9b393f0
netfilter: xtables: ignore unassigned hooks in check_entry_size_and_hooks

The "hook_entry" and "underflow" array contains values even for hooks
not provided, such as PREROUTING in conjunction with the "filter"
table. Usually, the values point to whatever the next rule is. For
the upcoming unconditionality and underflow checking patches however,
we must not inspect that arbitrary rule.

Skipping unassigned hooks seems like a good idea, also because
newinfo->hook_entry and newinfo->underflow will then continue to have
the poison value for detecting abnormalities.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
net/ipv4/netfilter/arp_tables.c
net/ipv4/netfilter/ip_tables.c
net/ipv6/netfilter/ip6_tables.c