Commit 2f574348 authored by Donald Hunter's avatar Donald Hunter Committed by Dong Chenchen
Browse files

netfilter: flowtable: initialise extack before use 

stable inclusion
from stable-v5.10.225
commit e5ceff2196dc633c995afb080f6f44a72cff6e1d
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAOXZI
CVE: CVE-2024-45018

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e5ceff2196dc633c995afb080f6f44a72cff6e1d



--------------------------------

[ Upstream commit e9767137308daf906496613fd879808a07f006a2 ]

Fix missing initialisation of extack in flow offload.

Fixes: c29f74e0 ("netfilter: nf_flow_table: hardware offload support")
Signed-off-by: default avatarDonald Hunter <donald.hunter@gmail.com>
Reviewed-by: default avatarSimon Horman <horms@kernel.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarDong Chenchen <dongchenchen2@huawei.com>
parent caaf346b

net/netfilter/nf_flow_table_offload.c

+1 −1
Original line number Diff line number Diff line
@@ -682,8 +682,8 @@ static int nf_flow_offload_tuple(struct nf_flowtable *flowtable, 
				 struct list_head *block_cb_list)

{

	struct flow_cls_offload cls_flow = {};

	struct netlink_ext_ack extack = {};

	struct flow_block_cb *block_cb;

	struct netlink_ext_ack extack;

	__be16 proto = ETH_P_ALL;

	int err, i = 0;