H.323 helper: fix possible NULL-ptr dereference
[NETFILTER]: H.323 helper: fix possible NULL-ptr dereference An RCF message containing a timeout results in a NULL-ptr dereference if no RRQ has been seen before. Noticed by the "SATURN tool", reported by Thomas Dillig <tdillig@stanford.edu> and Isil Dillig <isil@stanford.edu>. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
7e92c4788d
commit
4f40508af1
@@ -1092,7 +1092,7 @@ static struct ip_conntrack_expect *find_expect(struct ip_conntrack *ct,
|
||||
tuple.dst.protonum = IPPROTO_TCP;
|
||||
|
||||
exp = __ip_conntrack_expect_find(&tuple);
|
||||
if (exp->master == ct)
|
||||
if (exp && exp->master == ct)
|
||||
return exp;
|
||||
return NULL;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user