diff options
| author | Patrick McHardy <kaber@trash.net> | 2014-02-05 15:03:35 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-02-06 00:04:15 +0100 |
| commit | ec2c9935688fbd5eaa7c975e3e21562c3da77363 (patch) | |
| tree | 929fe5c28ed844898fec9226773c20a55748dcb1 /kernel/task_work.c | |
| parent | 53b70287ddf487a38b7cbf0a10db28f40714b799 (diff) | |
netfilter: nf_tables: fix potential oops when dumping sets
Commit c9c8e48597 (netfilter: nf_tables: dump sets in all existing families)
changed nft_ctx_init_from_setattr() to only look up the address family if it
is not NFPROTO_UNSPEC. However if it is NFPROTO_UNSPEC and a table attribute
is given, nftables_afinfo_lookup() will dereference the NULL afi pointer.
Fix by checking for non-NULL afi and also move a check added by that commit
to the proper position.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'kernel/task_work.c')
0 files changed, 0 insertions, 0 deletions