netfilter: ctnetlink: must check mark attributes vs NULL
authorFlorian Westphal <fw@strlen.de>
Thu, 20 Sep 2018 21:53:06 +0000 (23:53 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Sep 2018 08:14:46 +0000 (10:14 +0200)
commit9306425b70bf1284a037b7461222887aff48cf8d
tree7422951a9e4fd5e1fc48485dea8b5d7caa65c790
parent0de22baabc97f7fc05e31d82cec8049947946887
netfilter: ctnetlink: must check mark attributes vs NULL

else we will oops (null deref) when the attributes aren't present.

Also add back the EOPNOTSUPP in case MARK filtering is requested but
kernel doesn't support it.

Fixes: 59c08c69c2788 ("netfilter: ctnetlink: Support L3 protocol-filter on flush")
Reported-by: syzbot+e45eda8eda6e93a03959@syzkaller.appspotmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_netlink.c