mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-12 21:57:43 +00:00
netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
[ Upstream commit0d7c83463f
] Instead of EINVAL which should be used for malformed netlink messages. Fixes:eb31628e37
("netfilter: nf_tables: Add support for IPv6 NAT") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
parent
d1a00c9bb1
commit
58ee4d2537
1 changed files with 2 additions and 2 deletions
|
@ -129,7 +129,7 @@ static int nft_nat_init(const struct nft_ctx *ctx, const struct nft_expr *expr,
|
|||
priv->type = NF_NAT_MANIP_DST;
|
||||
break;
|
||||
default:
|
||||
return -EINVAL;
|
||||
return -EOPNOTSUPP;
|
||||
}
|
||||
|
||||
if (tb[NFTA_NAT_FAMILY] == NULL)
|
||||
|
@ -196,7 +196,7 @@ static int nft_nat_init(const struct nft_ctx *ctx, const struct nft_expr *expr,
|
|||
if (tb[NFTA_NAT_FLAGS]) {
|
||||
priv->flags = ntohl(nla_get_be32(tb[NFTA_NAT_FLAGS]));
|
||||
if (priv->flags & ~NF_NAT_RANGE_MASK)
|
||||
return -EINVAL;
|
||||
return -EOPNOTSUPP;
|
||||
}
|
||||
|
||||
return nf_ct_netns_get(ctx->net, family);
|
||||
|
|
Loading…
Reference in a new issue