[NETFILTER] nfnetlink: skip size check if size not specified (== 0)

Skip sizecheck if the size of the attribute wasn't specified, ie. zero.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 4 insertions, 1 deletions

diff --git a/include/linux/netfilter/nfnetlink.h b/include/linux/netfilter/nfnetlink.h
index 72975fa8795d..8be2f840a557 100644
--- a/include/linux/netfilter/nfnetlink.h
+++ b/include/linux/netfilter/nfnetlink.h
@@ -154,11 +154,14 @@ extern void nfattr_parse(struct nfattr *tb[], int maxattr,
 
 #define nfattr_bad_size(tb, max, cta_min)                               \
 ({      int __i, __res = 0;                                             \
-        for (__i=0; __i<max; __i++)                                     \
+        for (__i=0; __i<max; __i++) {                                   \
+                if (!cta_min[__i])                                      \
+                        continue;                                       \
                 if (tb[__i] && NFA_PAYLOAD(tb[__i]) < cta_min[__i]){    \
                         __res = 1;                                      \
                         break;                                          \
                 }                                                       \
+        }                                                               \
         __res;                                                          \
 })