diff options
author | Phil Sutter <phil@nwl.cc> | 2023-12-15 16:32:30 +0100 |
---|---|---|
committer | Phil Sutter <phil@nwl.cc> | 2024-03-06 15:40:37 +0100 |
commit | 62db596bf1f3dabffac3e0b9b0c3db487bfff828 (patch) | |
tree | 073e225781f4b6f25dcff47d698c192a96e5e8ea /examples/nft-obj-del.c | |
parent | cdde5a8c5a8734f2d540a0ab52c32d41d4d18127 (diff) |
expr: Enforce attr_policy compliance in nftnl_expr_set()
Every expression type defines an attr_policy array, so deny setting
attributes if not present. Also deny if maxlen field is non-zero and
lower than the given data_len.
Some attributes' max length is not fixed (e.g. NFTNL_EXPR_{TG,MT}_INFO )
or is not sensible to check (e.g. NFTNL_EXPR_DYNSET_EXPR). The zero
maxlen "nop" is also used for deprecated attributes, just to not
silently ignore them.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'examples/nft-obj-del.c')
0 files changed, 0 insertions, 0 deletions