netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechai...
authorGavrilov Ilia <Ilia.Gavrilov@infotecs.ru>
Wed, 24 May 2023 12:25:27 +0000 (12:25 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 6 Jun 2023 22:43:30 +0000 (00:43 +0200)
commitbd058763a624a1fb5c20f3c46e632d623c043676
tree272983a243df39fe80b3d6229eacd7c1bc7cb6e9
parent9025944fddfed5966c8f102f1fe921ab3aee2c12
netfilter: nf_tables: Add null check for nla_nest_start_noflag() in nft_dump_basechain_hook()

The nla_nest_start_noflag() function may fail and return NULL;
the return value needs to be checked.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

Fixes: d54725cd11a5 ("netfilter: nf_tables: support for multiple devices per netdev hook")
Signed-off-by: Gavrilov Ilia <Ilia.Gavrilov@infotecs.ru>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c