From: Patrick McHardy Date: Tue, 25 Apr 2006 00:18:59 +0000 (-0700) Subject: [NETFILTER]: ipt action: use xt_check_target for basic verification X-Git-Tag: v2.6.17-rc3~19 X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=18118cdbfd1f855e09ee511d764d6c9df3d4f952;p=karo-tx-linux.git [NETFILTER]: ipt action: use xt_check_target for basic verification The targets don't do the basic verification themselves anymore so the ipt action needs to take care of it. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- diff --git a/net/sched/act_ipt.c b/net/sched/act_ipt.c index 6056d20ef429..37640c6fc014 100644 --- a/net/sched/act_ipt.c +++ b/net/sched/act_ipt.c @@ -69,6 +69,11 @@ ipt_init_target(struct ipt_entry_target *t, char *table, unsigned int hook) DPRINTK("ipt_init_target: found %s\n", target->name); t->u.kernel.target = target; + ret = xt_check_target(target, AF_INET, t->u.target_size - sizeof(*t), + table, hook, 0, 0); + if (ret) + return ret; + if (t->u.kernel.target->checkentry && !t->u.kernel.target->checkentry(table, NULL, t->u.kernel.target, t->data,