[PATCH] [LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.

[PATCH] [LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.

[Marcus Sundberg]

Hi!

[LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.

This prevents an endless loop when nfnl_check_attributes() sees
an unknown attribute.

Signed-off-by: Marcus Sundberg <marcus@ingate.com>


--- libnfnetlink-0.0.30/src/libnfnetlink.c	2007/08/08 11:32:07
+++ libnfnetlink-0.0.30/src/libnfnetlink.c	2007/08/08 11:32:17
@@ -1129,6 +1129,7 @@ int nfnl_check_attributes(const struct n
  					 * the kernel which we don't understand
  					 * yet. We have to silently ignore this
  					 * for the sake of future compatibility */
+					attr = NFA_NEXT(attr, attrlen);
  					continue;
  				}
  				nfa[flavor - 1] = attr;

-- 
---------------------------------------+--------------------------
   Marcus Sundberg <marcus@ingate.com>  | Firewalls with SIP & NAT
  Software Developer, Ingate Systems AB |  http://www.ingate.com/

Re: [PATCH] [LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.

[Pablo Neira Ayuso]

Marcus Sundberg wrote:
> [LIBNFNETLINK] Fix endless loop on unknown netfilter attributes.
> 
> This prevents an endless loop when nfnl_check_attributes() sees
> an unknown attribute.

Applied. Thanks Marcus.

-- 
"Será preciso viajar a través de los ojos de los idiotas" -- Poeta en
Nueva York -- Federico García Lorca.