Florian Westphal da5eec7c65 netfilter: nf_tables: fix crash when nf_trace is enabled
commit 399a14ec7993d605740de7b2cd5c0ce8407d12ed upstream.

do not access info->pkt when info->trace is not 1.
nft_traceinfo is not initialized, except when tracing is enabled.

The 'nft_trace_enabled' static key cannot be used for this, we must
always check info->trace first.

Pass nft_pktinfo directly to avoid this.

Fixes: e34b9ed96ce3 ("netfilter: nf_tables: avoid skb access on nf_stolen")
Reported-by: Hangbin Liu <liuhangbin@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-08-25 11:45:12 +02:00
..
2022-02-25 09:36:06 +01:00
2022-08-17 15:16:19 +02:00
2022-05-25 12:22:58 -07:00
2022-04-07 21:06:41 -07:00
2022-08-17 15:16:19 +02:00
2022-07-02 11:20:56 -07:00
2022-05-28 11:39:01 -07:00
2022-05-10 11:59:22 +02:00
2022-03-03 09:55:28 +00:00