Pablo Neira Ayuso c5035c77f8 netfilter: nft_meta: fix cgroup matching
We have to stop iterating on the rule expressions if the cgroup
mismatches. Moreover, make sure a non-full socket from the input path
leads us to a crash.

Fixes: ce67417 ("netfilter: nft_meta: add cgroup support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2015-04-01 11:33:00 +02:00
..
2015-03-02 16:43:41 -05:00
2015-03-06 21:50:02 -05:00
2015-03-31 13:58:35 -04:00
2015-03-02 16:43:41 -05:00
2015-03-02 16:43:41 -05:00
2015-03-08 12:53:46 -07:00
2014-10-07 20:28:44 -04:00
2015-03-31 13:58:35 -04:00