| commit | e2fe35c17fed62d4ab5038fa9bc489e967ff8416 | |
| author | Jan Engelhardt <jengelh@medozas.de> | |
| Sat, 18 Jul 2009 13:22:30 +0000 (18 15:22 +0200) | ||
| committer | Jan Engelhardt <jengelh@medozas.de> | |
| Mon, 10 Aug 2009 11:35:31 +0000 (10 13:35 +0200) | ||
| tree | 84a4b0b688276b6788081f441984abd01d036b4d | treesnapshot (tar.gz zip) |
| parent | 90e7d4ab5c8b0c4c2e00e4893977f6aeec0f18f1 | commitdiff |
netfilter: xtables: check for standard verdicts in policies
This adds the second check that Rusty wanted to have a long time ago. :-)
Base chain policies must have absolute verdicts that cease processing
in the table, otherwise rule execution may continue in an unexpected
spurious fashion (e.g. next chain that follows in memory).
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
This adds the second check that Rusty wanted to have a long time ago. :-)
Base chain policies must have absolute verdicts that cease processing
in the table, otherwise rule execution may continue in an unexpected
spurious fashion (e.g. next chain that follows in memory).
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
| net/ipv4/netfilter/arp_tables.c | diffblobblamehistory | |
| net/ipv4/netfilter/ip_tables.c | diffblobblamehistory | |
| net/ipv6/netfilter/ip6_tables.c | diffblobblamehistory |