From: Phil Sutter <phil@nwl.cc>
Date: Thu, 17 Nov 2022 15:01:11 +0000 (+0100)
Subject: extensions: MARK: Sanitize MARK_xlate()
X-Git-Tag: v1.8.9~55
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c4fc6440a6f39606e38744bfc827852bb68829f4;p=thirdparty%2Fiptables.git

extensions: MARK: Sanitize MARK_xlate()

Since markinfo->mode might contain unexpected values, add a default case
returning zero.

Fixes: afefc7a134ca0 ("extensions: libxt_MARK: Add translation for revision 1 to nft")
Signed-off-by: Phil Sutter <phil@nwl.cc>
---

diff --git a/extensions/libxt_MARK.c b/extensions/libxt_MARK.c
index 1536563d..100f6a38 100644
--- a/extensions/libxt_MARK.c
+++ b/extensions/libxt_MARK.c
@@ -366,6 +366,8 @@ static int MARK_xlate(struct xt_xlate *xl,
 	case XT_MARK_OR:
 		xt_xlate_add(xl, "mark or 0x%x ", (uint32_t)markinfo->mark);
 		break;
+	default:
+		return 0;
 	}
 
 	return 1;