You've already forked linux-apfs
mirror of
https://github.com/linux-apfs/linux-apfs.git
synced 2026-05-01 15:00:59 -07:00
netfilter: nf_tables: fix wrong check of NFT_SET_MAP in nf_tables_bind_set
We should check "i" is used as a dictionary or not, "binding" is already checked before. Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
committed by
Pablo Neira Ayuso
parent
7757114972
commit
a46844021f
@@ -2946,7 +2946,7 @@ int nf_tables_bind_set(const struct nft_ctx *ctx, struct nft_set *set,
|
||||
* jumps are already validated for that chain.
|
||||
*/
|
||||
list_for_each_entry(i, &set->bindings, list) {
|
||||
if (binding->flags & NFT_SET_MAP &&
|
||||
if (i->flags & NFT_SET_MAP &&
|
||||
i->chain == binding->chain)
|
||||
goto bind;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user