]> git.ipfire.org Git - thirdparty/iproute2.git/commit
nstat: NULL Dereference when no entries specified
authorZiAo Li <23110240084@m.fudan.edu.cn>
Wed, 9 Apr 2025 15:03:30 +0000 (23:03 +0800)
committerStephen Hemminger <stephen@networkplumber.org>
Wed, 9 Apr 2025 16:31:26 +0000 (09:31 -0700)
commit866e1d107b7de68ca1fcd1d4d5ffecf9d96bff30
treef50f6b309979423052720943a7dffd4e3ced30e0
parentc498efe79ba9d1d1bee466cc35491d13ec3b6b2a
nstat: NULL Dereference when no entries specified

The NULL Pointer Dereference vulnerability happens in load_ugly_table(), misc/nstat.c, in the latest version of iproute2.
The vulnerability can be triggered by:
1. db is set to NULL at struct nstat_ent *db = NULL;
2. n is set to NULL at n = db;
3. NULL dereference of variable n happens at sscanf(p+1, "%llu", &n->val) != 1

Signed-off-by: ZiAo Li <23110240084@m.fudan.edu.cn>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
misc/nstat.c