X-Git-Url: http://demsky.eecs.uci.edu/git/?a=blobdiff_plain;f=net%2Fnetfilter%2Fxt_cgroup.c;h=a1d126f2946305a10ccc04ce92e469b1255f60f9;hb=affa0e033b04996700434312c76df3c78f683870;hp=7198d660b4dea1e9e79c6f9a13f4e6669bca569d;hpb=a6aacbde406eeb6f8fc218b2c6172825f5e73fcf;p=firefly-linux-kernel-4.4.55.git

diff --git a/net/netfilter/xt_cgroup.c b/net/netfilter/xt_cgroup.c
index 7198d660b4de..a1d126f29463 100644
--- a/net/netfilter/xt_cgroup.c
+++ b/net/netfilter/xt_cgroup.c
@@ -39,7 +39,7 @@ cgroup_mt(const struct sk_buff *skb, struct xt_action_param *par)
 {
 	const struct xt_cgroup_info *info = par->matchinfo;
 
-	if (skb->sk == NULL)
+	if (skb->sk == NULL || !sk_fullsock(skb->sk))
 		return false;
 
 	return (info->id == skb->sk->sk_classid) ^ info->invert;