Liping Zhang <zlpnob...@163.com> wrote:
> From: Liping Zhang <liping.zh...@spreadtrum.com>
> 
> When connlabel.conf is empty, nfct_labelmap_new will return NULL and
> set errno to 0. So we will miss to check this situation, and cause NULL
> deference in nfct_labelmap_get_bit.
> 
> Input the following commands will reproduce this crash:
>   # echo > /etc/xtables/connlabel.conf
>   # iptables -A INPUT -m connlabel --label abc
>   Segmentation fault (core dumped)

Applied, thanks!
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to