summaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorArturo Borrero <arturo.borrero.glez@gmail.com>2015-04-08 19:42:19 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2015-04-09 19:03:07 +0200
commit06d14d702e481f29d5fdc33afab4347e6efb678d (patch)
treed2ff0fd852958de0041f60d77599f6e8e1b1eb24 /include
parent86a65af62b6b986aa2ae3cbf3c655ea8225b027a (diff)
libxtables: find extensions based on family too
When using libxtables with an external program (nft) which switches family contexts (using xtables_set_nfproto()), the xtables_find_{match,target} functions need to compare the family too. We want to avoid this situation: 1) user first sets afinfo to IPv6 2) xtables_find_target() finds & load ip6t_REJECT and uses it 3) afinfo change to IPv4 4) user then tries to use ipt_REJECT 5) xtables_find_target() finds ip6t_REJECT instead (same target name) 6) using ip6t_REJECT as ipt_REJECT can cause a lot of troubles Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions