[PATCH 03/12] netfilter: nf_tables: allow expressions to return STOLEN

[Pablo Neira Ayuso]

From: Florian Westphal <f...@strlen.de>

Currently not supported, we'd oops as skb was (or is) free'd elsewhere.

Signed-off-by: Florian Westphal <f...@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pa...@netfilter.org>
---
 net/netfilter/nf_tables_core.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/net/netfilter/nf_tables_core.c b/net/netfilter/nf_tables_core.c
index 0dd5c695482f..70de32a6d5c0 100644
--- a/net/netfilter/nf_tables_core.c
+++ b/net/netfilter/nf_tables_core.c
@@ -178,6 +178,7 @@ nft_do_chain(struct nft_pktinfo *pkt, void *priv)
        case NF_ACCEPT:
        case NF_DROP:
        case NF_QUEUE:
+       case NF_STOLEN:
                nft_trace_packet(&info, chain, rule,
                                 rulenum, NFT_TRACETYPE_RULE);
                return regs.verdict.code;
-- 
2.1.4