Pablo Neira Ayuso
c5035c77f8
netfilter: nft_meta: fix cgroup matching
...
We have to stop iterating on the rule expressions if the cgroup
mismatches. Moreover, make sure a non-full socket from the input path
leads us to a crash.
Fixes: ce67417 ("netfilter: nft_meta: add cgroup support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2015-04-01 11:33:00 +02:00
..
2015-02-14 23:08:44 +01:00
2015-03-20 18:51:09 -04:00
2015-03-02 16:43:41 -05:00
2015-03-29 13:33:21 -07:00
2015-03-03 17:01:37 -05:00
2015-03-03 17:01:37 -05:00
2015-03-05 13:17:39 -05:00
2015-02-22 17:00:08 -05:00
2015-03-26 03:30:29 +01:00
2015-03-23 22:02:46 -04:00
2015-03-20 18:51:09 -04:00
2015-03-09 23:38:02 -04:00
2015-02-19 14:14:42 -08:00
2015-03-31 16:37:43 -04:00
2015-03-06 21:50:02 -05:00
2015-03-23 21:40:48 -04:00
2015-03-09 16:06:10 -04:00
2014-10-01 00:44:04 +10:00
2015-03-29 13:23:54 -07:00
2015-03-03 17:01:38 -05:00
2015-03-01 13:40:23 -05:00
2015-03-14 17:11:31 +01:00
2015-03-31 13:58:35 -04:00
2015-03-31 13:58:35 -04:00
2015-03-02 13:06:31 -05:00
2015-03-09 23:38:02 -04:00
2015-03-02 13:06:31 -05:00
2015-03-31 13:58:35 -04:00
2015-03-31 13:58:35 -04:00
2014-10-24 15:51:42 -04:00
2015-03-02 13:06:31 -05:00
2015-03-31 16:39:04 -04:00
2015-03-27 19:18:50 +01:00
2015-03-12 23:05:04 -04:00
2015-04-01 11:33:00 +02:00
2015-03-31 13:58:35 -04:00
2015-03-25 17:18:33 +01:00
2015-03-02 16:43:41 -05:00
2015-03-02 13:06:31 -05:00
2015-03-31 13:58:35 -04:00
2015-03-23 22:01:28 -04:00
2015-03-02 13:06:31 -05:00
2015-03-20 18:51:09 -04:00
2015-02-04 14:57:45 -08:00
2015-03-02 16:43:41 -05:00
2015-03-20 18:51:09 -04:00
2015-03-20 19:10:44 -04:00
2015-03-25 11:40:16 -04:00
2015-03-08 12:53:46 -07:00
2015-03-23 16:44:56 -04:00
2015-03-29 13:47:36 -07:00
2015-03-02 13:06:31 -05:00
2015-03-02 13:06:31 -05:00
2014-10-07 20:28:44 -04:00
2015-03-31 16:39:04 -04:00
2015-03-02 13:06:31 -05:00
2015-03-31 13:58:35 -04:00
2015-03-23 16:41:36 -04:00
2015-01-07 13:08:04 +01:00
2015-03-04 00:26:06 -05:00
2015-03-23 16:41:36 -04:00
2013-10-07 15:57:56 -04:00