nft: fix crash if TRACE is used

And any other match and target with no save function defined.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/iptables/nft.c b/iptables/nft.c
index c3d5d6108ae8843e0592c9d25b8f080fde14adb8..445d8f92aed6b8f286eaa8a0066ad0d5fec22d5f 100644 (file)
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -1006,7 +1006,8 @@ static void nft_match_save(struct nft_rule_expr *expr)
                printf("-m %s", match->name);
 
        /* FIXME missing parameter */
-       match->save(NULL, emu);
+       if (match->save)
+               match->save(NULL, emu);
 
        printf(" ");
 
@@ -1049,7 +1050,8 @@ static void nft_target_save(struct nft_rule_expr *expr)
                printf("-j %s", target->name);
 
        /* FIXME missing parameter */
-       target->save(NULL, emu);
+       if (target->save)
+               target->save(NULL, emu);
 
        free(emu);
 }