Message ID | 20230916004839.706452-30-cengiz.can@canonical.com |
---|---|
State | New |
Headers | show |
Series | [SRU,Jammy,OEM-6.0,OEM-6.1,Lunar] netfilter: nft_dynset: disallow object maps | expand |
diff --git a/net/netfilter/nft_dynset.c b/net/netfilter/nft_dynset.c index e65a83328b55..cf9a1ae87d9b 100644 --- a/net/netfilter/nft_dynset.c +++ b/net/netfilter/nft_dynset.c @@ -191,6 +191,9 @@ static int nft_dynset_init(const struct nft_ctx *ctx, if (IS_ERR(set)) return PTR_ERR(set); + if (set->flags & NFT_SET_OBJECT) + return -EOPNOTSUPP; + if (set->ops->update == NULL) return -EOPNOTSUPP;