summaryrefslogtreecommitdiff
path: root/include/net/netfilter/nf_log.h
diff options
context:
space:
mode:
authorGao Feng <fgao@ikuai8.com>2016-08-29 18:25:28 +0800
committerPablo Neira Ayuso <pablo@netfilter.org>2016-08-30 11:52:32 +0200
commit779994fa3636d46848edb402fe7517968e036e6f (patch)
tree59398c227d211898054545b870b5bf20dcda746f /include/net/netfilter/nf_log.h
parent3cb27991aad74299af2cd55a9c12684f5b0c76c6 (diff)
netfilter: log: Check param to avoid overflow in nf_log_set
The nf_log_set is an interface function, so it should do the strict sanity check of parameters. Convert the return value of nf_log_set as int instead of void. When the pf is invalid, return -EOPNOTSUPP. Signed-off-by: Gao Feng <fgao@ikuai8.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net/netfilter/nf_log.h')
-rw-r--r--include/net/netfilter/nf_log.h3
1 files changed, 1 insertions, 2 deletions
diff --git a/include/net/netfilter/nf_log.h b/include/net/netfilter/nf_log.h
index 83d855ba6af1..ee07dc8b0a7b 100644
--- a/include/net/netfilter/nf_log.h
+++ b/include/net/netfilter/nf_log.h
@@ -60,8 +60,7 @@ struct nf_logger {
int nf_log_register(u_int8_t pf, struct nf_logger *logger);
void nf_log_unregister(struct nf_logger *logger);
-void nf_log_set(struct net *net, u_int8_t pf,
- const struct nf_logger *logger);
+int nf_log_set(struct net *net, u_int8_t pf, const struct nf_logger *logger);
void nf_log_unset(struct net *net, const struct nf_logger *logger);
int nf_log_bind_pf(struct net *net, u_int8_t pf,