netfilter: nft_rbtree: ignore inactive matching element with no descendants
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 1 Aug 2016 11:13:08 +0000 (13:13 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 8 Aug 2016 09:27:37 +0000 (11:27 +0200)
commitc1eda3c6394f805886b2afa8c7ea5e04305ec698
tree4ffbd5227f627403d89a2aa67b832d50802462f3
parent2c86943c20e375b0fe562af0626f2e5461d8d203
netfilter: nft_rbtree: ignore inactive matching element with no descendants

If we find a matching element that is inactive with no descendants, we
jump to the found label, then crash because of nul-dereference on the
left branch.

Fix this by checking that the element is active and not an interval end
and skipping the logic that only applies to the tree iteration.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Tested-by: Anders K. Pedersen <akp@akp.dk>
net/netfilter/nft_rbtree.c