diff options
| author | Feng Wu <wufengwufengwufeng@gmail.com> | 2026-06-25 01:43:34 -0700 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2026-07-02 12:17:14 +0200 |
| commit | 60aee97fc7f8c0ad18474b984db47210e5a7b5f2 (patch) | |
| tree | cd9516c0cad7854c2538a98a408b6ad885b95896 /include/uapi/linux | |
| parent | 68fc6c6470d653fcfa7655f4f2b36ff444cb72b3 (diff) | |
netfilter: xt_dscp: add checkentry for tos match
The 'tos' match registered in xt_dscp.c has no .checkentry callback,
allowing userspace to insert rules with a non-boolean invert field
without any validation.
Add tos_mt_check() that rejects invert > 1 and attach it to both the
IPv4 and IPv6 'tos' match registrations.
Signed-off-by: Feng Wu <wufengwufengwufeng@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/uapi/linux')
0 files changed, 0 insertions, 0 deletions