diff options
| author | Brad Fitzpatrick <bradfitz@tailscale.com> | 2026-04-10 20:31:35 -0700 |
|---|---|---|
| committer | Brad Fitzpatrick <brad@danga.com> | 2026-04-14 07:45:01 -0700 |
| commit | 943b42603814c58e7d6c7a629ee7b71f9a011eca (patch) | |
| tree | 49a2d0448cbbe1120d765dd8a93790b0ac9a2c10 /control/controlhttp/controlhttpserver | |
| parent | a0a8fae8566fc41018faff5162d955e25f99ab4d (diff) | |
| download | tailscale-943b42603814c58e7d6c7a629ee7b71f9a011eca.tar.xz tailscale-943b42603814c58e7d6c7a629ee7b71f9a011eca.zip | |
util/linuxfw: fix nil deref in nftables chain check
Fix a panic in getOrCreateChain when the kernel lacks nftables support
(CONFIG_NF_TABLES). When the nftables netlink connection fails, chain
objects returned by getChainFromTable can have nil Hooknum and Priority
fields. Dereferencing these caused tailscaled to SIGSEGV during router
configuration, which manifested as tailscaled silently crashing ~13
seconds after "tailscale up" on arm64 gokrazy (whose kernel.arm64
build doesn't include nftables).
Updates #13038
Change-Id: I14433616da5ed57895cad37038921fb4f79c3534
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions