]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0ed4c4) | patch
parser: segfault in top scope define
authorPhil Oester <kernel@linuxace.com>
Fri, 29 Nov 2013 20:30:04 +0000 (12:30 -0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 30 Nov 2013 20:45:42 +0000 (21:45 +0100)
commitff355ec0f7732d6835f4e339abb1778924771fde
tree2f5f91afc538364e45568c1ea1649b2c84cc1b66tree | snapshot
parente0ed4c45d9ad2564ae3ab3f4465466b0130a845ccommit | diff
parser: segfault in top scope define

nft segfaults if a symbol is added in top_scope, because of a missing
init_list_head.  Trivial example:

    define ip_set = {192.168.1.2, 192.168.2.3}
    add rule filter output ip daddr $ip_set counter

This closes netfilter bugzilla #877.

Reported-by: Anand Raj Manickam <anandrm@gmail.com>
Signed-off-by: Phil Oester <kernel@linuxace.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/parser.y diff | blob | blame | history
Mirror of git://git.netfilter.org/nftables