git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 74c9c0c) | patch
[NETFILTER]: Fix iptables compat hook validation
authorDmitry Mishin <dim@openvz.org>
Tue, 5 Dec 2006 21:44:07 +0000 (13:44 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Thu, 7 Dec 2006 02:39:03 +0000 (18:39 -0800)
commitf6677f4312ee74f8ca68c4cc4060465607b72b41
tree75cdd6d87c4ddbd2ae9080f205da86a76fa0118ctree | snapshot
parent74c9c0c17dea729d6089c0c82762babd02e65f84commit | diff
[NETFILTER]: Fix iptables compat hook validation

In compat mode, matches and targets valid hooks checks always successful due
to not initialized e->comefrom field yet. This patch separates this checks from
translation code and moves them after mark_source_chains() call, where these
marks are initialized.

Signed-off-by: Dmitry Mishin <dim@openvz.org>
Signed-off-by; Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/netfilter/ip_tables.c diff | blob | history
Full containers within linux kernel