[SRU][N][PATCH 1/1] UBUNTU: SAUCE: netfilter: ctnetlink: Fix -Wuninitialized in ctnetlink_secctx_size()
Magali Lemes
magali.lemes at canonical.com
Fri Aug 15 22:18:41 UTC 2025
BugLink: https://bugs.launchpad.net/bugs/2120561
When compiling with Clang, the following warning shows up:
net/netfilter/nf_conntrack_netlink.c:674:41: warning: variable 'len' is uninitialized when used here [-Wuninitialized]
674 | + nla_total_size(sizeof(char) * len); /* CTA_SECCTX_NAME */
| ^~~
net/netfilter/nf_conntrack_netlink.c:667:9: note: initialize the variable 'len' to silence this warning
667 | int len, ret;
| ^
| = 0
Fix the warning by removing the uninitialized `len` variable and matching
upstream commit 2d470c778120 ("lsm: replace context+len with lsm_context").
Fixes: c45f92d3c95e ("UBUNTU: SAUCE: apparmor4.0.0 [17/90]: LSM stacking v39: LSM: Use lsmcontext in security_secid_to_secctx")
Signed-off-by: Magali Lemes <magali.lemes at canonical.com>
---
net/netfilter/nf_conntrack_netlink.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/net/netfilter/nf_conntrack_netlink.c b/net/netfilter/nf_conntrack_netlink.c
index f8575cdc0f5f..0eac66981acf 100644
--- a/net/netfilter/nf_conntrack_netlink.c
+++ b/net/netfilter/nf_conntrack_netlink.c
@@ -664,14 +664,14 @@ static inline size_t ctnetlink_acct_size(const struct nf_conn *ct)
static inline int ctnetlink_secctx_size(const struct nf_conn *ct)
{
#ifdef CONFIG_NF_CONNTRACK_SECMARK
- int len, ret;
+ int ret;
ret = security_secid_to_secctx(ct->secmark, NULL);
if (ret < 0)
return 0;
return nla_total_size(0) /* CTA_SECCTX */
- + nla_total_size(sizeof(char) * len); /* CTA_SECCTX_NAME */
+ + nla_total_size(sizeof(char) * ret); /* CTA_SECCTX_NAME */
#else
return 0;
#endif
--
2.48.1
More information about the kernel-team
mailing list