netfilter: conntrack: timeout interface depend on CONFIG_NF_CONNTRACK_TIMEOUT

Browse source

Now that cttimeout support for nft_ct is in place, these should depend
on CONFIG_NF_CONNTRACK_TIMEOUT otherwise we can crash when dumping the
policy if this option is not enabled.

[   71.600121] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[...]
[   71.600141] CPU: 3 PID: 7612 Comm: nft Not tainted 4.18.0+ #246
[...]
[   71.600188] Call Trace:
[   71.600201]  ? nft_ct_timeout_obj_dump+0xc6/0xf0 [nft_ct]

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2018-08-31 12:36:01 +02:00

parent f94e63801a

commit a874752a10

8 changed files with 45 additions and 45 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

net/netfilter/nf_conntrack_proto_dccp.c

View file

8

net/netfilter/nf_conntrack_proto_generic.c

View file

8

net/netfilter/nf_conntrack_proto_gre.c

View file

8

net/netfilter/nf_conntrack_proto_icmp.c

View file

8

net/netfilter/nf_conntrack_proto_icmpv6.c

View file

14

net/netfilter/nf_conntrack_proto_sctp.c

View file

12

net/netfilter/nf_conntrack_proto_tcp.c

View file

20

net/netfilter/nf_conntrack_proto_udp.c

View file