diff options
author | David S. Miller <davem@davemloft.net> | 2015-06-01 19:56:43 -0400 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2015-06-01 19:56:43 -0400 |
commit | e453581dd518f60b45a8d2b9cf344e2a87d5267e (patch) | |
tree | 0d1cc178164471008f792827cdbc829d84c5bd17 /net | |
parent | cd842a67e660dd3a2605557b9a64ea01cb57ba72 (diff) | |
parent | d26e2c9ffa385dd1b646f43c1397ba12af9ed431 (diff) |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fix for net
The following patch reverts the ebtables chunk that enforces counters that was
introduced in the recently applied d26e2c9ffa38 ('Revert "netfilter: ensure
number of counters is >0 in do_replace()"') since this breaks ebtables.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r-- | net/bridge/netfilter/ebtables.c | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/net/bridge/netfilter/ebtables.c b/net/bridge/netfilter/ebtables.c index 24c7c96bf5f8..91180a7fc943 100644 --- a/net/bridge/netfilter/ebtables.c +++ b/net/bridge/netfilter/ebtables.c | |||
@@ -1117,8 +1117,6 @@ static int do_replace(struct net *net, const void __user *user, | |||
1117 | return -ENOMEM; | 1117 | return -ENOMEM; |
1118 | if (tmp.num_counters >= INT_MAX / sizeof(struct ebt_counter)) | 1118 | if (tmp.num_counters >= INT_MAX / sizeof(struct ebt_counter)) |
1119 | return -ENOMEM; | 1119 | return -ENOMEM; |
1120 | if (tmp.num_counters == 0) | ||
1121 | return -EINVAL; | ||
1122 | 1120 | ||
1123 | tmp.name[sizeof(tmp.name) - 1] = 0; | 1121 | tmp.name[sizeof(tmp.name) - 1] = 0; |
1124 | 1122 | ||
@@ -2161,8 +2159,6 @@ static int compat_copy_ebt_replace_from_user(struct ebt_replace *repl, | |||
2161 | return -ENOMEM; | 2159 | return -ENOMEM; |
2162 | if (tmp.num_counters >= INT_MAX / sizeof(struct ebt_counter)) | 2160 | if (tmp.num_counters >= INT_MAX / sizeof(struct ebt_counter)) |
2163 | return -ENOMEM; | 2161 | return -ENOMEM; |
2164 | if (tmp.num_counters == 0) | ||
2165 | return -EINVAL; | ||
2166 | 2162 | ||
2167 | memcpy(repl, &tmp, offsetof(struct ebt_replace, hook_entry)); | 2163 | memcpy(repl, &tmp, offsetof(struct ebt_replace, hook_entry)); |
2168 | 2164 | ||