diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-03-17 12:04:42 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-03-28 09:57:09 +0200 |
| commit | 2c74374c2e88c7b7992bf808d9f9391f7452f9d9 (patch) | |
| tree | ccf085b7eb70596d0f091936a50b175092d17f99 | |
| parent | eb1ba8d1c3e2ca9817e24baad8fd1a418693fabc (diff) | |
| download | linux-2c74374c2e88c7b7992bf808d9f9391f7452f9d9.tar.gz linux-2c74374c2e88c7b7992bf808d9f9391f7452f9d9.tar.bz2 linux-2c74374c2e88c7b7992bf808d9f9391f7452f9d9.zip | |
netfilter: nf_tables: initialize registers in nft_do_chain()
commit 4c905f6740a365464e91467aa50916555b28213d upstream.
Initialize registers to avoid stack leak into userspace.
Fixes: 96518518cc41 ("netfilter: add nftables")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | net/netfilter/nf_tables_core.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nf_tables_core.c b/net/netfilter/nf_tables_core.c index dbc2e945c98e..a61b5bf5aa0f 100644 --- a/net/netfilter/nf_tables_core.c +++ b/net/netfilter/nf_tables_core.c @@ -162,7 +162,7 @@ nft_do_chain(struct nft_pktinfo *pkt, void *priv) struct nft_rule *const *rules; const struct nft_rule *rule; const struct nft_expr *expr, *last; - struct nft_regs regs; + struct nft_regs regs = {}; unsigned int stackptr = 0; struct nft_jumpstack jumpstack[NFT_JUMP_STACK_SIZE]; bool genbit = READ_ONCE(net->nft.gencursor); |