Re: [PATCH nf] netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()

2018-05-17 Thread Pablo Neira Ayuso
On Wed, May 16, 2018 at 04:21:05PM +0200, Florian Westphal wrote: > Taehee Yoo wrote: > > In the nft_ct_helper_obj_dump(), always priv->helper4 is dereferenced. > > But if family is ipv6, priv->helper6 should be dereferenced. > > > > Steps to reproduces: > > > >#test.nft

Re: [PATCH nf] netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()

2018-05-16 Thread Florian Westphal
Taehee Yoo wrote: > In the nft_ct_helper_obj_dump(), always priv->helper4 is dereferenced. > But if family is ipv6, priv->helper6 should be dereferenced. > > Steps to reproduces: > >#test.nft >table ip6 filter { > ct helper ftp { > type

[PATCH nf] netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()

2018-05-16 Thread Taehee Yoo
In the nft_ct_helper_obj_dump(), always priv->helper4 is dereferenced. But if family is ipv6, priv->helper6 should be dereferenced. Steps to reproduces: #test.nft table ip6 filter { ct helper ftp { type "ftp" protocol tcp } chain input {