aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_lookup.c
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2024-04-17 17:43:01 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2024-04-17 17:43:01 +0200
commitefefd4f00c967d00ad7abe092554ffbb70c1a793 (patch)
treed62889846e900f119e996c707b840176d6345b7b /net/netfilter/nft_lookup.c
parent75ce9506ee3dc66648a7d74ab3b0acfa364d6d43 (diff)
downloadlinux-efefd4f00c967d00ad7abe092554ffbb70c1a793.tar.gz
netfilter: nf_tables: missing iterator type in lookup walk
Add missing decorator type to lookup expression and tighten WARN_ON_ONCE check in pipapo to spot earlier that this is unset. Fixes: 29b359cf6d95 ("netfilter: nft_set_pipapo: walk over current view on netlink dump") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_lookup.c')
-rw-r--r--net/netfilter/nft_lookup.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/nft_lookup.c b/net/netfilter/nft_lookup.c
index a0055f510e31e9..b314ca728a2912 100644
--- a/net/netfilter/nft_lookup.c
+++ b/net/netfilter/nft_lookup.c
@@ -216,6 +216,7 @@ static int nft_lookup_validate(const struct nft_ctx *ctx,
return 0;
iter.genmask = nft_genmask_next(ctx->net);
+ iter.type = NFT_ITER_UPDATE;
iter.skip = 0;
iter.count = 0;
iter.err = 0;