]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ctnetlink: must check mark attributes vs NULL
authorFlorian Westphal <fw@strlen.de>
Thu, 20 Sep 2018 21:53:06 +0000 (23:53 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Sep 2018 08:14:46 +0000 (10:14 +0200)
commit318295bea5681fd14c6f2fc7a76a2619b7187e0d
tree7422951a9e4fd5e1fc48485dea8b5d7caa65c790
parent27dda038f7efbbc69b4e74e1d7981f97097a766c
netfilter: ctnetlink: must check mark attributes vs NULL

else we will oops (null deref) when the attributes aren't present.

Also add back the EOPNOTSUPP in case MARK filtering is requested but
kernel doesn't support it.

Fixes: f83c431f84e7e ("netfilter: ctnetlink: Support L3 protocol-filter on flush")
Reported-by: syzbot+e45eda8eda6e93a03959@syzkaller.appspotmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_netlink.c