| commit | 30c1d25b9870d551be42535067d5481668b5e6f3 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Mon Aug 11 12:26:10 2025 +0200 |
| committer | Florian Westphal <fw@strlen.de> | Wed Aug 13 08:34:32 2025 +0200 |
| tree | 12ebdf5c7266b0d6f1176632c41512fcd0eb5bf0 | |
| parent | d7e82594a45c5cb270940ac469846e8026c7db0f [diff] |
netfilter: nft_set_pipapo: fix null deref for empty set
Blamed commit broke the check for a null scratch map:
- if (unlikely(!m || !*raw_cpu_ptr(m->scratch)))
+ if (unlikely(!raw_cpu_ptr(m->scratch)))
This should have been "if (!*raw_ ...)".
Use the pattern of the avx2 version which is more readable.
This can only be reproduced if avx2 support isn't available.
Fixes: d8d871a35ca9 ("netfilter: nft_set_pipapo: merge pipapo_get/lookup")
Signed-off-by: Florian Westphal <fw@strlen.de>