Commit ecfcdfec authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nf_nat: handle NF_DROP from nfnetlink_parse_nat_setup()

nf_nat_setup_info() returns NF_* verdicts, so convert them to error
codes that is what ctnelink expects. This has passed overlook without
having any impact since this nf_nat_setup_info() has always returned
NF_ACCEPT so far. Since 870190a9 ("netfilter: nat: convert nat bysrc
hash to rhashtable"), this is problem.
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent d1a6cba5
...@@ -807,7 +807,7 @@ nfnetlink_parse_nat_setup(struct nf_conn *ct, ...@@ -807,7 +807,7 @@ nfnetlink_parse_nat_setup(struct nf_conn *ct,
if (err < 0) if (err < 0)
return err; return err;
return nf_nat_setup_info(ct, &range, manip); return nf_nat_setup_info(ct, &range, manip) == NF_DROP ? -ENOMEM : 0;
} }
#else #else
static int static int
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment