path: root/src/datatype.c
diff options
authorFlorian Westphal <>2017-04-04 20:46:46 +0200
committerPablo Neira Ayuso <>2017-04-08 22:30:36 +0200
commit65666972f8d33b8594843568fb4c6f819d4a3e78 (patch)
tree20882bd8e31a12ff0518596deb4ff41aac733596 /src/datatype.c
parent54370e1630e95755a6cfada95389bda34e8ffd83 (diff)
exthdr: avoid crash with older kernels
if kernel is older it won't understand the EXTHDR_OP attribute, i.e. the rule gets accepted as a check for ipv6 exthdr. On dump nft is then presented with a invalid ipv6 exthdr. So we need to get rid of the assert and output an "invalid" message on list. Longterm we need a proper vm description or kernel-side check to reject such messages in first place. After patch, test suite yields erros of type ip6/tcpopt.t: WARNING: 'src/nft add rule --debug=netlink ip6 test-ip6 \ input tcp option sack right 1': 'tcp option sack right 1' mismatches 'ip6 nexthdr 6 unknown-exthdr unknown 0x1 [invalid type]' Signed-off-by: Florian Westphal <> Acked-by: Pablo Neira Ayuso <>
Diffstat (limited to 'src/datatype.c')
0 files changed, 0 insertions, 0 deletions