On Wed, Feb 05, 2014 at 03:03:35PM +0000, Patrick McHardy wrote: > Commit c9c8e48597 (netfilter: nf_tables: dump sets in all existing families) > changed nft_ctx_init_from_setattr() to only look up the address family if it > is not NFPROTO_UNSPEC. However if it is NFPROTO_UNSPEC and a table attribute > is given, nftables_afinfo_lookup() will dereference the NULL afi pointer. > > Fix by checking for non-NULL afi and also move a check added by that commit > to the proper position. Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html