Otherwise, you may crash in: nft add rule bridge filter input ether type ip Reported-by: Alvaro Neira Ayuso <alvaroneay@xxxxxxxxx> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> --- src/proto.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/proto.c b/src/proto.c index 0a37a65..e5f49cb 100644 --- a/src/proto.c +++ b/src/proto.c @@ -754,6 +754,7 @@ static struct error_record *ethertype_parse(const struct expr *sym, { struct error_record *erec; + *res = NULL; erec = sym->dtype->basetype->parse(sym, res); if (erec != NULL) return erec; -- 1.7.10.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html