Re: [PATCH nf] netfilter: nf_tables: fix possible oops when dumping stateful objects

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Jan 07, 2017 at 08:51:50PM +0800, Liping Zhang wrote:
> From: Liping Zhang <zlpnobody@xxxxxxxxx>
> 
> When dumping nft stateful objects, if NFTA_OBJ_TABLE and NFTA_OBJ_TYPE
> attributes are not specified either, filter will become NULL, so oops
> will happen(actually nft utility will always set NFTA_OBJ_TABLE attr,
> so I write a test program to make this happen):
> 
>   BUG: unable to handle kernel NULL pointer dereference at (null)
>   IP: nf_tables_dump_obj+0x17c/0x330 [nf_tables]
>   [...]
>   Call Trace:
>   ? nf_tables_dump_obj+0x5/0x330 [nf_tables]
>   ? __kmalloc_reserve.isra.35+0x31/0x90
>   ? __alloc_skb+0x5b/0x1e0
>   netlink_dump+0x124/0x2a0
>   __netlink_dump_start+0x161/0x190
>   nf_tables_getobj+0xe8/0x280 [nf_tables]

Also applied, thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux