Not a problem in practise since objtype is ignored if the NFT_SET_OBJECT flag is not set. But call down gcc warnings: net/netfilter/nf_tables_api.c: In function 'nf_tables_newset': >> net/netfilter/nf_tables_api.c:3003:15: warning: 'objtype' may be used +uninitialized in this function Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> --- v2: should be NFT_OBJECT_UNSPEC, not NFT_OBJ_UNSPEC net/netfilter/nf_tables_api.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 799eaa6808b9..9ead6a7514c3 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -2920,6 +2920,8 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk, return -EINVAL; } else if (flags & NFT_SET_OBJECT) return -EINVAL; + else + objtype = NFT_OBJECT_UNSPEC; timeout = 0; if (nla[NFTA_SET_TIMEOUT] != NULL) { -- 2.1.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html