| commit | 9306425b70bf1284a037b7461222887aff48cf8d | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Thu Sep 20 23:53:06 2018 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Fri Sep 21 10:14:46 2018 +0200 |
| tree | 7422951a9e4fd5e1fc48485dea8b5d7caa65c790 | |
| parent | 0de22baabc97f7fc05e31d82cec8049947946887 [diff] |
netfilter: ctnetlink: must check mark attributes vs NULL
else we will oops (null deref) when the attributes aren't present.
Also add back the EOPNOTSUPP in case MARK filtering is requested but
kernel doesn't support it.
Fixes: 59c08c69c2788 ("netfilter: ctnetlink: Support L3 protocol-filter on flush")
Reported-by: syzbot+e45eda8eda6e93a03959@syzkaller.appspotmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>