netfilter: nf_tables: validate len in nft_validate_data_load()

[deliverable/linux.git] / include / net / netfilter / nf_tables.h

diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h
index d6a2f0ed5130582d0489bc372e3b7e033f5267e8..f491243ff58b606ae9bb1750564b6b3ec87d0de8 100644 (file)
--- a/include/net/netfilter/nf_tables.h
+++ b/include/net/netfilter/nf_tables.h
@@ -116,7 +116,7 @@ int nft_validate_input_register(enum nft_registers reg);
 int nft_validate_output_register(enum nft_registers reg);
 int nft_validate_data_load(const struct nft_ctx *ctx, enum nft_registers reg,
                           const struct nft_data *data,
-                          enum nft_data_types type);
+                          enum nft_data_types type, unsigned int len);
 
 
 /**