| From 7ab490bc5e4458ec9bf5b03cdebd72090ba43664 Mon Sep 17 00:00:00 2001 |
| From: Florian Westphal <fw@strlen.de> |
| Date: Thu, 16 Jan 2020 08:58:05 +0100 |
| Subject: [PATCH] netfilter: nft_tunnel: ERSPAN_VERSION must not be null |
| |
| commit 9ec22d7c6c69146180577f3ad5fdf504beeaee62 upstream. |
| |
| Fixes: af308b94a2a4a5 ("netfilter: nf_tables: add tunnel support") |
| Signed-off-by: Florian Westphal <fw@strlen.de> |
| Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> |
| Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> |
| |
| diff --git a/net/netfilter/nft_tunnel.c b/net/netfilter/nft_tunnel.c |
| index d89c7c553030..5284fcf16be7 100644 |
| --- a/net/netfilter/nft_tunnel.c |
| +++ b/net/netfilter/nft_tunnel.c |
| @@ -266,6 +266,9 @@ static int nft_tunnel_obj_erspan_init(const struct nlattr *attr, |
| if (err < 0) |
| return err; |
| |
| + if (!tb[NFTA_TUNNEL_KEY_ERSPAN_VERSION]) |
| + return -EINVAL; |
| + |
| version = ntohl(nla_get_be32(tb[NFTA_TUNNEL_KEY_ERSPAN_VERSION])); |
| switch (version) { |
| case ERSPAN_VERSION: |
| -- |
| 2.7.4 |
| |
