forked from rpms/kernel
35 lines
904 B
Diff
35 lines
904 B
Diff
|
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
|
||
|
|
index 38ff119ab..11f4b1aab 100644
|
||
|
|
--- a/net/netfilter/nf_tables_api.c
|
||
|
|
+++ b/net/netfilter/nf_tables_api.c
|
||
|
|
@@ -10442,16 +10442,10 @@ static int nft_verdict_init(const struct nft_ctx *ctx, struct nft_data *data,
|
||
|
|
data->verdict.code = ntohl(nla_get_be32(tb[NFTA_VERDICT_CODE]));
|
||
|
|
|
||
|
|
switch (data->verdict.code) {
|
||
|
|
- default:
|
||
|
|
- switch (data->verdict.code & NF_VERDICT_MASK) {
|
||
|
|
- case NF_ACCEPT:
|
||
|
|
- case NF_DROP:
|
||
|
|
- case NF_QUEUE:
|
||
|
|
- break;
|
||
|
|
- default:
|
||
|
|
- return -EINVAL;
|
||
|
|
- }
|
||
|
|
- fallthrough;
|
||
|
|
+ case NF_ACCEPT:
|
||
|
|
+ case NF_DROP:
|
||
|
|
+ case NF_QUEUE:
|
||
|
|
+ break;
|
||
|
|
case NFT_CONTINUE:
|
||
|
|
case NFT_BREAK:
|
||
|
|
case NFT_RETURN:
|
||
|
|
@@ -10486,6 +10480,8 @@ static int nft_verdict_init(const struct nft_ctx *ctx, struct nft_data *data,
|
||
|
|
|
||
|
|
data->verdict.chain = chain;
|
||
|
|
break;
|
||
|
|
+ default:
|
||
|
|
+ return -EINVAL;
|
||
|
|
}
|
||
|
|
|
||
|
|
desc->len = sizeof(data->verdict);
|