expr: data_reg: Fix DATA_CHAIN comparison

Split DATA_VERDICT and DATA_CHAIN comparison. A verdict can have a NULL
chain (accept, drop, etc) so segfault will happen when strcmp is called.

Signed-off-by: Carlos Falgueras García <carlosfg@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/src/expr/data_reg.c b/src/expr/data_reg.c
index a954e9539957fef47dab94505e1dad6c4648dbb2..395e9f656ca85f57a8ff922bfcff7bd61b649b57 100644 (file)
--- a/src/expr/data_reg.c
+++ b/src/expr/data_reg.c
@@ -387,6 +387,7 @@ bool nftnl_data_reg_cmp(const union nftnl_data_reg *r1,
                return  r1->len == r2->len &&
                        !memcmp(r1->val, r2->val, r1->len);
        case DATA_VERDICT:
+               return  r1->verdict == r2->verdict;
        case DATA_CHAIN:
                return  r1->verdict == r2->verdict &&
                        !strcmp(r1->chain, r2->chain);