From 95618771d5e4c2bd4b0aa1dac458395ddd158f7f Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Fri, 17 Oct 2025 09:29:47 +0200 Subject: [PATCH] netlink: Zero nft_data_linearize objects when populating Callers of netlink_gen_{key,data}() pass an uninitialized auto-variable, avoid misinterpreting garbage in fields "left blank". Signed-off-by: Phil Sutter --- src/netlink.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/netlink.c b/src/netlink.c index 7882381e..3258f9ab 100644 --- a/src/netlink.c +++ b/src/netlink.c @@ -563,6 +563,8 @@ static void netlink_gen_prefix(const struct expr *expr, static void netlink_gen_key(const struct expr *expr, struct nft_data_linearize *data) { + memset(data, 0, sizeof(*data)); + switch (expr->etype) { case EXPR_VALUE: return netlink_gen_constant_data(expr, data); @@ -580,6 +582,8 @@ static void netlink_gen_key(const struct expr *expr, static void __netlink_gen_data(const struct expr *expr, struct nft_data_linearize *data, bool expand) { + memset(data, 0, sizeof(*data)); + switch (expr->etype) { case EXPR_VALUE: return netlink_gen_constant_data(expr, data); -- 2.47.3