]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 59383ea) | patch
evaluate: validate set expression type before accessing flags
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 8 Jul 2025 22:21:49 +0000 (00:21 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 13 Aug 2025 18:50:30 +0000 (20:50 +0200)
commit6d305a4c9338c4386aea186744369f97654d900e
tree4381c829725fdb5fdf2931e42a830250afdb7263tree | snapshot
parent59383ea5494434401061cad13890f7a0da7c8fadcommit | diff
evaluate: validate set expression type before accessing flags

commit 2022e8bb5cf0e0fa81ab0a5087bd1ab6e20280ee upstream.

Validate set->init is of EXPR_SET expression type before accessing
set_flags.

Fixes: 81e36530fcac ("src: replace interval segment tree overlap and automerge")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c diff | blob | blame | history
Mirror of git://git.netfilter.org/nftables