]> www.infradead.org Git - users/hch/dma-mapping.git/commit
netfilter: xtables: fix typo causing some targets not to load on IPv6
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 20 Oct 2024 12:49:51 +0000 (14:49 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 21 Oct 2024 09:31:26 +0000 (11:31 +0200)
commit306ed1728e8438caed30332e1ab46b28c25fe3d8
tree89f8d66da6b535fe5d92e32e332e683bd87ceb4e
parent1230fe7ad3974f7bf6c78901473e039b34d4fb1f
netfilter: xtables: fix typo causing some targets not to load on IPv6

- There is no NFPROTO_IPV6 family for mark and NFLOG.
- TRACE is also missing module autoload with NFPROTO_IPV6.

This results in ip6tables failing to restore a ruleset. This issue has been
reported by several users providing incomplete patches.

Very similar to Ilya Katsnelson's patch including a missing chunk in the
TRACE extension.

Fixes: 0bfcb7b71e73 ("netfilter: xtables: avoid NFPROTO_UNSPEC where needed")
Reported-by: Ignat Korchagin <ignat@cloudflare.com>
Reported-by: Ilya Katsnelson <me@0upti.me>
Reported-by: Krzysztof Olędzki <ole@ans.pl>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_NFLOG.c
net/netfilter/xt_TRACE.c
net/netfilter/xt_mark.c