netfilter: expect: fix crash when putting uninited expectation
authorFlorian Westphal <fw@strlen.de>
Mon, 10 Jul 2017 11:53:53 +0000 (13:53 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Jul 2017 15:03:12 +0000 (17:03 +0200)
commit36ac344e16e04e3e55e8fed7446095a6458c64e6
treec578a73d1a21517d1b4101b7e74f0db0b0bc5ee4
parent974292defee033bc43ccfcb2fcefc3eba3905340
netfilter: expect: fix crash when putting uninited expectation

We crash in __nf_ct_expect_check, it calls nf_ct_remove_expect on the
uninitialised expectation instead of existing one, so del_timer chokes
on random memory address.

Fixes: ec0e3f01114ad32711243 ("netfilter: nf_ct_expect: Add nf_ct_remove_expect()")
Reported-by: Sergey Kvachonok <ravenexp@gmail.com>
Tested-by: Sergey Kvachonok <ravenexp@gmail.com>
Cc: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_expect.c