]> git.dujemihanovic.xyz Git - linux.git/commit
netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
authorKuniyuki Iwashima <kuniyu@amazon.com>
Thu, 25 Jul 2024 19:28:21 +0000 (12:28 -0700)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 31 Jul 2024 21:21:34 +0000 (23:21 +0200)
commitc22921df777de5606f1047b1345b8d22ef1c0b34
tree5824c5fc27fd19086e80f080b11180ec01f1b4ea
parent5830aa863981d43560748aa93589c0695191d95d
netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id],
but the function is exposed to user space before the entry is allocated
via register_pernet_subsys().

Let's call register_pernet_subsys() before xt_register_template().

Fixes: fdacd57c79b7 ("netfilter: x_tables: never register tables by default")
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv6/netfilter/ip6table_nat.c