On Sat, Jan 07, 2017 at 08:51:50PM +0800, Liping Zhang wrote:
> From: Liping Zhang <[email protected]>
> 
> When dumping nft stateful objects, if NFTA_OBJ_TABLE and NFTA_OBJ_TYPE
> attributes are not specified either, filter will become NULL, so oops
> will happen(actually nft utility will always set NFTA_OBJ_TABLE attr,
> so I write a test program to make this happen):
> 
>   BUG: unable to handle kernel NULL pointer dereference at (null)
>   IP: nf_tables_dump_obj+0x17c/0x330 [nf_tables]
>   [...]
>   Call Trace:
>   ? nf_tables_dump_obj+0x5/0x330 [nf_tables]
>   ? __kmalloc_reserve.isra.35+0x31/0x90
>   ? __alloc_skb+0x5b/0x1e0
>   netlink_dump+0x124/0x2a0
>   __netlink_dump_start+0x161/0x190
>   nf_tables_getobj+0xe8/0x280 [nf_tables]

Also applied, thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to