]> git.ipfire.org Git - thirdparty/nftables.git/commit
mnl: fix error rule reporting with missing table/chain and anonymous sets
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 9 May 2020 09:36:01 +0000 (11:36 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 14 May 2020 12:27:25 +0000 (14:27 +0200)
commit6301522e2669c9ddb4e5da2a1442c224c2d51518
treec3db85d9e61e7f41564df3d504bf6dc44240ecaa
parentc96c7da272e33a34770c4de4e3e50f7ed264672e
mnl: fix error rule reporting with missing table/chain and anonymous sets

handle_merge() skips handle location initialization because set name != NULL.

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7f64f1e in erec_print (octx=0x55555555d2c0, erec=0x55555555fcf0, debug_mask=0) at erec.c:95
95              switch (indesc->type) {
(gdb) bt
    buf=0x55555555db20 "add rule inet traffic-filter input tcp dport { 22, 80, 443 } accept") at libnftables.c:459
(gdb) p indesc
$1 = (const struct input_descriptor *) 0x0

Closes: http://bugzilla.opensuse.org/show_bug.cgi?id=1171321
Fixes: 086ec6f30c96 ("mnl: extended error support for create command")
Reported-by: Jan Engelhardt <jengelh@inai.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c