ebtables-compat: fix rule deleting with -D in rules with no target

Before this patch, rule deleting with -D produces segfault in rules
with no target.

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/iptables/nft-bridge.c b/iptables/nft-bridge.c
index c4f5db6df74497569ccd5932838f489d9bf3b35c..9498600e673727ed9da64fd5becd1a4d98e30169 100644 (file)
--- a/iptables/nft-bridge.c
+++ b/iptables/nft-bridge.c
@@ -620,7 +620,7 @@ static bool nft_bridge_rule_find(struct nft_family_ops *ops, struct nft_rule *r,
                return false;
        }
 
-       if (strcmp(cs->jumpto, this.jumpto) != 0) {
+       if (cs->jumpto != NULL && strcmp(cs->jumpto, this.jumpto) != 0) {
                DEBUGP("Different verdict\n");
                return false;
        }