mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-07-22 03:27:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak

Browse Source 
This needs to test for nonzero retval.

Fixes: c54c7c6854 ("netfilter: nft_meta_bridge: add NFT_META_BRI_IIFPVID support")
Closes: https://sashiko.dev/#/patchset/20260618061631.21919-1-fw%40strlen.de
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Florian Westphal
2026-06-19 00:34:49 +02:00
committed by Pablo Neira Ayuso
parent b8b09dc2bf
commit 27dd299774
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
net/bridge/netfilter/nft_meta_bridge.c
View File

@@ -44,7 +44,9 @@ static void nft_meta_bridge_get_eval(const struct nft_expr *expr,
if (!br_dev || !br_vlan_enabled(br_dev))
goto err;
br_vlan_get_pvid_rcu(in, &p_pvid);
if (br_vlan_get_pvid_rcu(in, &p_pvid))
goto err;
nft_reg_store16(dest, p_pvid);
return;
}