提交 99e25d07 编写于 作者: P Pablo Neira Ayuso

netfilter: cttimeout: ctnl_timeout_find_get() returns incorrect pointer to type

Compiler did not catch incorrect typing in the rcu hook assignment.

 % nfct add timeout test-tcp inet tcp established 100 close 10 close_wait 10
 % iptables -I OUTPUT -t raw -p tcp -j CT --timeout test-tcp
 dmesg - xt_CT: Timeout policy `test-tcp' can only be used by L3 protocol number 25000

The CT target bails out with incorrect layer 3 protocol number.

Fixes: 6c1fd7dc ("netfilter: cttimeout: decouple timeout policy from nfnetlink_cttimeout object")
Reported-by: NHarsha Sharma <harshasharmaiitr@gmail.com>
Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
上级 a874752a
...@@ -489,8 +489,8 @@ static int cttimeout_default_get(struct net *net, struct sock *ctnl, ...@@ -489,8 +489,8 @@ static int cttimeout_default_get(struct net *net, struct sock *ctnl,
return err; return err;
} }
static struct ctnl_timeout * static struct nf_ct_timeout *ctnl_timeout_find_get(struct net *net,
ctnl_timeout_find_get(struct net *net, const char *name) const char *name)
{ {
struct ctnl_timeout *timeout, *matching = NULL; struct ctnl_timeout *timeout, *matching = NULL;
...@@ -509,7 +509,7 @@ ctnl_timeout_find_get(struct net *net, const char *name) ...@@ -509,7 +509,7 @@ ctnl_timeout_find_get(struct net *net, const char *name)
break; break;
} }
err: err:
return matching; return matching ? &matching->timeout : NULL;
} }
static void ctnl_timeout_put(struct nf_ct_timeout *t) static void ctnl_timeout_put(struct nf_ct_timeout *t)
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册