Liping Zhang <zlpnobody@xxxxxxx> wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > When connlabel.conf is empty, nfct_labelmap_new will return NULL and > set errno to 0. So we will miss to check this situation, and cause NULL > deference in nfct_labelmap_get_bit. > > Input the following commands will reproduce this crash: > # echo > /etc/xtables/connlabel.conf > # iptables -A INPUT -m connlabel --label abc > Segmentation fault (core dumped) Applied, thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
