aha/net/ipv6/netfilter
Jan Engelhardt a7d51738e7 netfilter: xtables: ignore unassigned hooks in check_entry_size_and_hooks
The "hook_entry" and "underflow" array contains values even for hooks
not provided, such as PREROUTING in conjunction with the "filter"
table. Usually, the values point to whatever the next rule is. For
the upcoming unconditionality and underflow checking patches however,
we must not inspect that arbitrary rule.

Skipping unassigned hooks seems like a good idea, also because
newinfo->hook_entry and newinfo->underflow will then continue to have
the poison value for detecting abnormalities.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
2009-08-10 13:35:28 +02:00
..
ip6_queue.c netfilter: queue: use NFPROTO_ for queue callsites 2009-05-08 10:30:46 +02:00
ip6_tables.c netfilter: xtables: ignore unassigned hooks in check_entry_size_and_hooks 2009-08-10 13:35:28 +02:00
ip6t_ah.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_eui64.c netfilter: xtables: move extension arguments into compound structure (1/6) 2008-10-08 11:35:18 +02:00
ip6t_frag.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_hbh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_ipv6header.c netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE 2009-05-05 15:32:16 +02:00
ip6t_LOG.c netfilter: use a linked list of loggers 2009-03-16 14:54:21 +01:00
ip6t_mh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_REJECT.c net: skb->dst accessors 2009-06-03 02:51:04 -07:00
ip6t_rt.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6table_filter.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_mangle.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_raw.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_security.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
Kconfig netfilter: trivial Kconfig spelling fixes 2009-03-24 13:35:27 -07:00
Makefile netfilter: Combine ipt_ttl and ip6t_hl source 2009-02-18 18:39:31 +01:00
nf_conntrack_l3proto_ipv6.c netfilter: conntrack: switch hook PFs to nfproto 2009-08-10 13:35:20 +02:00
nf_conntrack_proto_icmpv6.c netfilter: nf_ct_icmp: keep the ICMP ct entries longer 2009-06-08 15:53:43 +02:00
nf_conntrack_reasm.c netfilter: Use frag list abstraction interfaces. 2009-06-09 00:23:58 -07:00