Mailing List Archive

Hi!

[LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.

This prevents an endless loop when nfnl_check_attributes() sees
an unknown attribute.

Signed-off-by: Marcus Sundberg <marcus@ingate.com>


--- libnfnetlink-0.0.30/src/libnfnetlink.c 2007/08/08 11:32:07
+++ libnfnetlink-0.0.30/src/libnfnetlink.c 2007/08/08 11:32:17
@@ -1129,6 +1129,7 @@ int nfnl_check_attributes(const struct n
* the kernel which we don't understand
* yet. We have to silently ignore this
* for the sake of future compatibility */
+ attr = NFA_NEXT(attr, attrlen);
continue;
}
nfa[flavor - 1] = attr;

--
---------------------------------------+--------------------------
Marcus Sundberg <marcus@ingate.com> | Firewalls with SIP & NAT
Software Developer, Ingate Systems AB | http://www.ingate.com/