From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 17 Sep 2024 17:18:09 +0000 (+0200)
Subject: cache: initialize filter when fetching implicit chains
X-Git-Tag: v1.1.1~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e3d2a5e852ceea587bfff5878e6e5c569f15116a;p=thirdparty%2Fnftables.git

cache: initialize filter when fetching implicit chains

ASAN reports:

  src/cache.c:734:25: runtime error: load of value 189, which is not a valid value for type '_Bool'

because filter->reset.rule remains uninitialized.

Initialize filter and replace existing construct to initialize table and
chain which leaves remaining fields uninitialized.

Fixes: dbff26bfba83 ("cache: consolidate reset command")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/cache.c b/src/cache.c
index c8ef1603..b75a5bf3 100644
--- a/src/cache.c
+++ b/src/cache.c
@@ -1118,15 +1118,14 @@ err_ctx_list:
 static int implicit_chain_cache(struct netlink_ctx *ctx, struct table *table,
 				const char *chain_name)
 {
-	struct nft_cache_filter filter;
+	struct nft_cache_filter filter = {};
 	struct chain *chain;
 	int ret = 0;
 
 	list_for_each_entry(chain, &table->chain_bindings, cache.list) {
-		filter.list = (typeof(filter.list)) {
-			.table = table->handle.table.name,
-			.chain = chain->handle.chain.name,
-		};
+		filter.list.table = table->handle.table.name;
+		filter.list.chain = chain->handle.chain.name;
+
 		ret = rule_init_cache(ctx, table, &filter);
 	}