bridge: ebtables: don't crash when using dnat target in output chains
authorFlorian Westphal <fw@strlen.de>
Sun, 3 Nov 2019 19:54:28 +0000 (20:54 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 5 Dec 2019 14:36:56 +0000 (15:36 +0100)
commit6fc27a2497def71f459ee326c9b7580530b7a838
tree0af0116a91447aa222ced58c10380ce1730507b3
parent3c4879a381c5ca3d9a8a6f884b55f53d3c02a710
bridge: ebtables: don't crash when using dnat target in output chains

[ Upstream commit b23c0742c2ce7e33ed79d10e451f70fdb5ca85d1 ]

xt_in() returns NULL in the output hook, skip the pkt_type change for
that case, redirection only makes sense in broute/prerouting hooks.

Reported-by: Tom Yan <tom.ty89@gmail.com>
Cc: Linus Lüssing <linus.luessing@c0d3.blue>
Fixes: cf3cb246e277d ("bridge: ebtables: fix reception of frames DNAT-ed to bridge device/port")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bridge/netfilter/ebt_dnat.c