Commit 083edca0 authored Jul 24, 2006 by Patrick McHardy Committed by David S. Miller Jul 24, 2006

[NETFILTER]: H.323 helper: fix possible NULL-ptr dereference



An RCF message containing a timeout results in a NULL-ptr dereference if
no RRQ has been seen before.

Noticed by the "SATURN tool", reported by Thomas Dillig <tdillig@stanford.edu>
and Isil Dillig <isil@stanford.edu>.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent b4e54de8

net/ipv4/netfilter/ip_conntrack_helper_h323.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1200,7 +1200,7 @@ static struct ip_conntrack_expect find_expect(struct ip_conntrack ct,
		tuple.dst.protonum = IPPROTO_TCP;

		exp = __ip_conntrack_expect_find(&tuple);
		if (exp->master == ct)
		if (exp && exp->master == ct)
		return exp;
		return NULL;
		}