From: Phil Sutter <phil@nwl.cc>
Date: Thu, 17 Nov 2022 15:37:02 +0000 (+0100)
Subject: extensions: ecn: Sanitize xlate callback
X-Git-Tag: v1.8.9~52
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=424ef98918d31377a305cdf1626e1c1f69ab6df1;p=thirdparty%2Fiptables.git

extensions: ecn: Sanitize xlate callback

Catch unexpected values in einfo->ip_ect.

Fixes: ca42442093d3d ("iptables: extensions: libxt_ecn: Add translation to nft")
Signed-off-by: Phil Sutter <phil@nwl.cc>
---

diff --git a/extensions/libxt_ecn.c b/extensions/libxt_ecn.c
index ad3c7a03..83a4acfa 100644
--- a/extensions/libxt_ecn.c
+++ b/extensions/libxt_ecn.c
@@ -156,6 +156,8 @@ static int ecn_xlate(struct xt_xlate *xl,
 		case 3:
 			xt_xlate_add(xl, "ce");
 			break;
+		default:
+			return 0;
 		}
 	}
 	return 1;