Florian Westphal 14a846030b netfilter: fib: check correct rtable in vrf setups ...

BugLink: https://bugs.launchpad.net/bugs/2097301

[ Upstream commit 05ef7055debc804e8083737402127975e7244fc4 ]

We need to init l3mdev unconditionally, else main routing table is searched
and incorrect result is returned unless strict (iif keyword) matching is
requested.

Next patch adds a selftest for this.

Fixes: 2a8a7c0eaa ("netfilter: nft_fib: Fix for rpath check with VRF devices")
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1761
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com>
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>

2025-02-14 15:50:30 +03:00

..

arp_tables.c

netfilter: complete validation of user input

2024-06-07 14:48:45 +02:00

arpt_mangle.c

…

arptable_filter.c

…

ip_tables.c

netfilter: complete validation of user input

2024-06-07 14:48:45 +02:00

ipt_ah.c

…

ipt_ECN.c

…

ipt_REJECT.c

…

ipt_rpfilter.c

…

ipt_SYNPROXY.c

…

iptable_filter.c

…

iptable_mangle.c

…

iptable_nat.c

netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().

2024-11-09 18:44:48 +03:00

iptable_raw.c

…

iptable_security.c

…

Kconfig

…

Makefile

…

nf_defrag_ipv4.c

…

nf_dup_ipv4.c

netfilter: nf_tables: prevent nf_skb_duplicated corruption

2025-01-17 14:44:05 +03:00

nf_nat_h323.c

…

nf_nat_pptp.c

…

nf_nat_snmp_basic_main.c

…

nf_nat_snmp_basic.asn1

…

nf_reject_ipv4.c

netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n

2025-02-14 15:50:24 +03:00

nf_socket_ipv4.c

…

nf_tproxy_ipv4.c

netfilter: tproxy: bail out if IP has been disabled on the device

2024-08-13 12:11:58 +02:00

nft_dup_ipv4.c

…

nft_fib_ipv4.c

netfilter: fib: check correct rtable in vrf setups

2025-02-14 15:50:30 +03:00

nft_reject_ipv4.c

…