Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aa4095a1 authored by Fernando Fernandez Mancera's avatar Fernando Fernandez Mancera Committed by Pablo Neira Ayuso
Browse files

netfilter: nf_tables: fix possible null-pointer dereference in object update 



Not all objects have an update operation. If the object type doesn't
implement an update operation and the user tries to update it will hit
EOPNOTSUPP.

Fixes: d62d0ba9 ("netfilter: nf_tables: Introduce stateful object update operation")
Signed-off-by: default avatarFernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 85936e56

net/netfilter/nf_tables_api.c

+3 −0
Original line number Diff line number Diff line
@@ -5140,6 +5140,9 @@ static int nf_tables_updobj(const struct nft_ctx *ctx, 
	struct nft_trans *trans;

	int err;



	if (!obj->ops->update)

		return -EOPNOTSUPP;



	trans = nft_trans_alloc(ctx, NFT_MSG_NEWOBJ,

				sizeof(struct nft_trans_obj));

	if (!trans)