diff options
author | Eyal Birger <eyal.birger@gmail.com> | 2021-01-01 11:02:26 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-01-03 20:03:54 +0100 |
commit | d05e9515b84074b0a0a49a2b49da31bd057bad7b (patch) | |
tree | 26df9ec48df9f9fa0e4987becc7cdc8dc37f1775 /src/conntrack/filter.c | |
parent | f20393c27802449d9b9c4e52540c716f1fc1ecc2 (diff) |
examples: check return value of nfct_nlmsg_build()
nfct_nlmsg_build() may fail for different reasons, for example if
insufficient parameters exist in the ct object. The resulting nlh would
not contain any of the ct attributes.
Some conntrack operations would still operate in such case, for example
an IPCTNL_MSG_CT_DELETE message would just delete all existing conntrack
entries.
While the example as it is does supply correct parameters, it's safer
as reference to validate the return value.
Signed-off-by: Eyal Birger <eyal.birger@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/conntrack/filter.c')
0 files changed, 0 insertions, 0 deletions