[NETFILTER]: ipt action: use xt_check_target for basic verification
The targets don't do the basic verification themselves anymore so the ipt action needs to take care of it. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
		
							parent
							
								
									91536b7ae6
								
							
						
					
					
						commit
						18118cdbfd
					
				| @ -69,6 +69,11 @@ ipt_init_target(struct ipt_entry_target *t, char *table, unsigned int hook) | ||||
| 	DPRINTK("ipt_init_target: found %s\n", target->name); | ||||
| 	t->u.kernel.target = target; | ||||
| 
 | ||||
| 	ret = xt_check_target(target, AF_INET, t->u.target_size - sizeof(*t), | ||||
| 			      table, hook, 0, 0); | ||||
| 	if (ret) | ||||
| 		return ret; | ||||
| 
 | ||||
| 	if (t->u.kernel.target->checkentry | ||||
| 	    && !t->u.kernel.target->checkentry(table, NULL, | ||||
| 		    			       t->u.kernel.target, t->data, | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user