diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-08-01 14:13:08 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-08-08 12:27:37 +0300 |
| commit | c1eda3c6394f805886b2afa8c7ea5e04305ec698 (patch) | |
| tree | 4ffbd5227f627403d89a2aa67b832d50802462f3 /net/netfilter/nf_conntrack_sip.c | |
| parent | 2c86943c20e375b0fe562af0626f2e5461d8d203 (diff) | |
| download | linux-c1eda3c6394f805886b2afa8c7ea5e04305ec698.tar.xz | |
netfilter: nft_rbtree: ignore inactive matching element with no descendants
If we find a matching element that is inactive with no descendants, we
jump to the found label, then crash because of nul-dereference on the
left branch.
Fix this by checking that the element is active and not an interval end
and skipping the logic that only applies to the tree iteration.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Tested-by: Anders K. Pedersen <akp@akp.dk>
Diffstat (limited to 'net/netfilter/nf_conntrack_sip.c')
0 files changed, 0 insertions, 0 deletions