diff options
| author |   Patrick McHardy <kaber@trash.net> | 2014-02-05 15:03:35 +0000 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2014-02-06 00:04:15 +0100 |
| commit | ec2c9935688fbd5eaa7c975e3e21562c3da77363 (patch) | |
| tree | 929fe5c28ed844898fec9226773c20a55748dcb1 /tools/perf/scripts/python | |
| parent | netfilter: nf_tables: fix overrun in nf_tables_set_alloc_name() (diff) | |
| download | linux-dev-ec2c9935688fbd5eaa7c975e3e21562c3da77363.tar.xz linux-dev-ec2c9935688fbd5eaa7c975e3e21562c3da77363.zip | |
netfilter: nf_tables: fix potential oops when dumping sets
Commit c9c8e48597 (netfilter: nf_tables: dump sets in all existing families)
changed nft_ctx_init_from_setattr() to only look up the address family if it
is not NFPROTO_UNSPEC. However if it is NFPROTO_UNSPEC and a table attribute
is given, nftables_afinfo_lookup() will dereference the NULL afi pointer.
Fix by checking for non-NULL afi and also move a check added by that commit
to the proper position.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions