Phil Sutter bcf4934288 netfilter: ebtables: Fix extension lookup with identical name ... If a requested extension exists as module and is not loaded, ebt_check_match() might accidentally use an NFPROTO_UNSPEC one with same name and fail. Reproduced with limit match: Given xt_limit and ebt_limit both built as module, the following would fail: modprobe xt_limit ebtables -I INPUT --limit 1/s -j ACCEPT The fix is to make ebt_check_match() distrust a found NFPROTO_UNSPEC extension and retry after requesting an appropriate module. Cc: Florian Westphal <fw@strlen.de> Signed-off-by: Phil Sutter <phil@nwl.cc> Acked-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2016-04-13 01:16:57 +02:00
..
Kconfig	netfilter: bridge: add reject support	2014-07-22 12:00:22 +02:00
Makefile	netfilter: kill remnants of ulog targets	2014-07-25 14:55:44 +02:00
ebt_802_3.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_among.c	bridge: netfilter: Use ether_addr_copy	2014-02-24 19:16:44 -05:00
ebt_arp.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_arpreply.c	netfilter: xtables: substitute temporary defines by final name	2010-05-11 18:31:17 +02:00
ebt_dnat.c	bridge: netfilter: Use ether_addr_copy	2014-02-24 19:16:44 -05:00
ebt_ip.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_ip6.c	netfilter-bridge: layout of if statements	2015-11-23 17:54:41 +01:00
ebt_limit.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_log.c	netfilter-bridge: brace placement	2015-11-23 17:54:40 +01:00
ebt_mark.c	netfilter: xtables: substitute temporary defines by final name	2010-05-11 18:31:17 +02:00
ebt_mark_m.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_nflog.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
ebt_pkttype.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ebt_redirect.c	bridge: netfilter: Use ether_addr_copy	2014-02-24 19:16:44 -05:00
ebt_snat.c	bridge: netfilter: Use ether_addr_copy	2014-02-24 19:16:44 -05:00
ebt_stp.c	netfilter-bridge: Cleanse indentation	2015-11-23 17:54:39 +01:00
ebt_vlan.c	netfilter-bridge: use netdev style comments	2015-11-23 17:54:39 +01:00
ebtable_broute.c	netfilter: ebtables: Simplify the arguments to ebt_do_table	2015-09-18 21:57:35 +02:00
ebtable_filter.c	netfilter-bridge: Cleanse indentation	2015-11-23 17:54:39 +01:00
ebtable_nat.c	netfilter-bridge: Cleanse indentation	2015-11-23 17:54:39 +01:00
ebtables.c	netfilter: ebtables: Fix extension lookup with identical name	2016-04-13 01:16:57 +02:00
nf_log_bridge.c	netfilter: bridge: add generic packet logger	2014-06-27 13:20:47 +02:00
nf_tables_bridge.c	netfilter: nf_tables: release objects on netns destruction	2015-12-28 18:34:35 +01:00
nft_meta_bridge.c	netfilter: nf_tables: wrap tracing with a static key	2015-12-09 13:23:13 +01:00
nft_reject_bridge.c	netfilter: ipv4: fix NULL dereference	2016-03-28 17:59:29 +02:00