netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parse



Make sure the pktinfo protocol fields are initialized if this fails to
parse the transport header.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent beac5afa

include/net/netfilter/nf_tables_ipv6.h

+3 −2

Original line number	Diff line number	Diff line
		@@ -15,9 +15,10 @@ nft_set_pktinfo_ipv6(struct nft_pktinfo *pkt,
		nft_set_pktinfo(pkt, skb, state);

		protohdr = ipv6_find_hdr(pkt->skb, &thoff, -1, &frag_off, NULL);
		/* If malformed, drop it */
		if (protohdr < 0)
		if (protohdr < 0) {
		nft_set_pktinfo_proto_unspec(pkt, skb);
		return -1;
		}

		pkt->tprot_set = true;
		pkt->tprot = protohdr;