The option struct needs to be terminated, otherwise ip{,6}tables

will access illegal memory in merge_options().

Signed-off-by: Jan Engelhardt <jengelh@gmx.de>

diff --git a/extensions/libip6t_NFLOG.c b/extensions/libip6t_NFLOG.c
index 9f4ebaa5bec72921ec7d90ef57c7c8690fca27d6..22c99e90480ac64af587052703d68e8e78a8508b 100644 (file)
--- a/extensions/libip6t_NFLOG.c
+++ b/extensions/libip6t_NFLOG.c
@@ -19,6 +19,7 @@ static struct option opts[] = {
        { "nflog-prefix",    1, 0, NFLOG_PREFIX },
        { "nflog-range",     1, 0, NFLOG_RANGE },
        { "nflog-threshold", 1, 0, NFLOG_THRESHOLD },
+       {NULL},
 };
 
 static void help(void)

diff --git a/extensions/libipt_NFLOG.c b/extensions/libipt_NFLOG.c
index b43a8b87002fbf5049e968e39920ee59aa98df5b..37df5b0db7a3fe78ee12b72450bd27b6bbf215e8 100644 (file)
--- a/extensions/libipt_NFLOG.c
+++ b/extensions/libipt_NFLOG.c
@@ -19,6 +19,7 @@ static struct option opts[] = {
        { "nflog-prefix",    1, 0, NFLOG_PREFIX },
        { "nflog-range",     1, 0, NFLOG_RANGE },
        { "nflog-threshold", 1, 0, NFLOG_THRESHOLD },
+       {NULL},
 };
 
 static void help(void)