forked from Minki/linux
netfilter: nf_tables: allow expressions to return STOLEN
Currently not supported, we'd oops as skb was (or is) free'd elsewhere. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
parent
0813fbc913
commit
5efa0fc6d7
@ -178,6 +178,7 @@ next_rule:
|
||||
case NF_ACCEPT:
|
||||
case NF_DROP:
|
||||
case NF_QUEUE:
|
||||
case NF_STOLEN:
|
||||
nft_trace_packet(&info, chain, rule,
|
||||
rulenum, NFT_TRACETYPE_RULE);
|
||||
return regs.verdict.code;
|
||||
|
Loading…
Reference in New Issue
Block a user