From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 14 Jan 2015 14:33:57 +0000 (+0100)
Subject: netfilter: nf_tables: validate hooks in NAT expressions
X-Git-Tag: omap-for-v4.1/prcm-dts-mfd-syscon-fix~184^2~18^2~3
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=75e8d06d4308436055d1a78a2c02bf6328ba724d;p=pandora-kernel.git

netfilter: nf_tables: validate hooks in NAT expressions

The user can crash the kernel if it uses any of the existing NAT
expressions from the wrong hook, so add some code to validate this
when loading the rule.

This patch introduces nft_chain_validate_hooks() which is based on
an existing function in the bridge version of the reject expression.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed