]> www.infradead.org Git - users/jedix/linux-maple.git/commit
netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error
authorChenyuan Yang <chenyuan0y@gmail.com>
Thu, 13 Mar 2025 19:54:41 +0000 (14:54 -0500)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 23 Mar 2025 09:20:33 +0000 (10:20 +0100)
commit778b09d91baafb13408470c721d034d6515cfa5a
tree32a51abdecacd193fc8345b961c05567f8fb8369
parenteaaff9b6702e99be5d79135f2afa9fc48a0d59e0
netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error

It is possible that ctx in nfqnl_build_packet_message() could be used
before it is properly initialize, which is only initialized
by nfqnl_get_sk_secctx().

This patch corrects this problem by initializing the lsmctx to a safe
value when it is declared.

This is similar to the commit 35fcac7a7c25
("audit: Initialize lsmctx to avoid memory allocation error").

Fixes: 2d470c778120 ("lsm: replace context+len with lsm_context")
Signed-off-by: Chenyuan Yang <chenyuan0y@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_queue.c