Re: [PATCH nft] datatype: fix crash when using basetype instead of symbolic constants

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Nov 27, 2014 at 01:59:56PM +0100, Pablo Neira Ayuso wrote:
> The following example:
> 
>  # nft add rule filter input ct state 8 accept
>  Segmentation fault
> 
> leads to a crash because we have the following datatype relation:
> 
>  ct_state -> bitmask -> integer
> 
> The bitmask, which is an intermediate basetype, has no parse()
> function, this leads to a crash in symbolic_constant_parse().
> 
> So let's default to the leaf basetype parser when the intermediate
> one has no specific parser() function.
> 
> Add a bugtrap too to catch inconsistent datatype configurations.

I think we should just walk down the chain until we find something
with a parse function.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux