netfilter: xtables: fix typo causing some targets not to load on IPv6
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 20 Oct 2024 12:49:51 +0000 (14:49 +0200)
committerSalvatore Bonaccorso <carnil@debian.org>
Sun, 27 Oct 2024 06:25:33 +0000 (07:25 +0100)
commit34e715ad6826848444bb867a71a62a93b400b6dd
treeb610f4e9a4b646afccc8fc0d87a3373d5b3455df
parentc14b0166ad0831e7577ea2d0461453c41ed79bb4
netfilter: xtables: fix typo causing some targets not to load on IPv6

Origin: https://git.kernel.org/linus/306ed1728e8438caed30332e1ab46b28c25fe3d8
Bug-Debian: https://bugs.debian.org/1085953

- There is no NFPROTO_IPV6 family for mark and NFLOG.
- TRACE is also missing module autoload with NFPROTO_IPV6.

This results in ip6tables failing to restore a ruleset. This issue has been
reported by several users providing incomplete patches.

Very similar to Ilya Katsnelson's patch including a missing chunk in the
TRACE extension.

Fixes: 0bfcb7b71e73 ("netfilter: xtables: avoid NFPROTO_UNSPEC where needed")
Reported-by: Ignat Korchagin <ignat@cloudflare.com>
Reported-by: Ilya Katsnelson <me@0upti.me>
Reported-by: Krzysztof Olędzki <ole@ans.pl>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name netfilter-xtables-fix-typo-causing-some-targets-not-.patch
net/netfilter/xt_NFLOG.c
net/netfilter/xt_TRACE.c
net/netfilter/xt_mark.c