[PATCH openEuler-22.03-LTS] [Backport] netfilter: flowtable: initialise extack before use - Kernel

14 Oct 2024

From: Donald Hunter donald.hunter@gmail.com
stable inclusion
from stable-v5.10.225
commit e5ceff2196dc633c995afb080f6f44a72cff6e1d
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAOXZI
CVE: CVE-2024-45018
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=...
--------------------------------
[ Upstream commit e9767137308daf906496613fd879808a07f006a2 ]
Fix missing initialisation of extack in flow offload.
Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Signed-off-by: Donald Hunter donald.hunter@gmail.com
Reviewed-by: Simon Horman horms@kernel.org
Signed-off-by: Pablo Neira Ayuso pablo@netfilter.org
Signed-off-by: Sasha Levin sashal@kernel.org
Signed-off-by: Dong Chenchen dongchenchen2@huawei.com
---
 net/netfilter/nf_flow_table_offload.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/net/netfilter/nf_flow_table_offload.c b/net/netfilter/nf_flow_table_offload.c
index 746ca77d0aad..f6275d93f8a5 100644
--- a/net/netfilter/nf_flow_table_offload.c
+++ b/net/netfilter/nf_flow_table_offload.c
@@ -682,8 +682,8 @@ static int nf_flow_offload_tuple(struct nf_flowtable *flowtable,
    			 struct list_head *block_cb_list)
 {
    struct flow_cls_offload cls_flow = {};
+	struct netlink_ext_ack extack = {};
    struct flow_block_cb *block_cb;
-	struct netlink_ext_ack extack;
    __be16 proto = ETH_P_ALL;
    int err, i = 0;
-- 
2.25.1


    