diff options
| author |   Florian Westphal <fw@strlen.de> | 2018-09-20 23:53:06 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2018-09-21 10:14:46 +0200 |
| commit | 9306425b70bf1284a037b7461222887aff48cf8d (patch) | |
| tree | 7422951a9e4fd5e1fc48485dea8b5d7caa65c790 /net/ipv6 | |
| parent | netfilter: nf_tables: use rhashtable_walk_enter instead of rhashtable_walk_init (diff) | |
| download | linux-dev-9306425b70bf1284a037b7461222887aff48cf8d.tar.xz linux-dev-9306425b70bf1284a037b7461222887aff48cf8d.zip | |
netfilter: ctnetlink: must check mark attributes vs NULL
else we will oops (null deref) when the attributes aren't present.
Also add back the EOPNOTSUPP in case MARK filtering is requested but
kernel doesn't support it.
Fixes: 59c08c69c2788 ("netfilter: ctnetlink: Support L3 protocol-filter on flush")
Reported-by: syzbot+e45eda8eda6e93a03959@syzkaller.appspotmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv6')
0 files changed, 0 insertions, 0 deletions