Re: [nft PATCH] libnftables: Zero ctx->vars after freeing it

[Phil Sutter <phil@xxxxxx>]

On Tue, Sep 03, 2024 at 05:49:18PM +0200, Phil Sutter wrote:
> Leaving the invalid pointer value in place will cause a double-free when
> users call nft_ctx_clear_vars() first, then nft_ctx_free(). Moreover,
> nft_ctx_add_var() passes the pointer to mrealloc() and thus assumes it
> to be either NULL or valid.
> 
> Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1772
> Fixes: 9edaa6a51eab4 ("src: add --define key=value")
> Signed-off-by: Phil Sutter <phil@xxxxxx>

Patch applied.