tailscale/util/linuxfw
Mike O'Driscoll 43ad51d947
util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) (#18947)
When IPv6 is unavailable on a system, AddConnmarkSaveRule() and
DelConnmarkSaveRule() would panic with a nil pointer dereference.
Both methods directly iterated over []iptablesInterface{i.ipt4, i.ipt6}
without checking if ipt6 was nil.

Use `getTables()` instead to properly retrieve the available tables
on a given system

Fixes #3310


(cherry picked from commit 021de2e1bc)

Signed-off-by: Mike O'Driscoll <mikeo@tailscale.com>
2026-03-10 15:23:54 -04:00
..
linuxfwtest all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
detector.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
fake_netfilter.go util/linuxfw,wgengine/router: add connmark rules for rp_filter workaround (#18860) 2026-03-04 14:09:11 -05:00
fake.go util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) (#18947) 2026-03-10 15:23:54 -04:00
helpers.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_disabled.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_for_svcs_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_for_svcs.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
iptables_runner_test.go util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) (#18947) 2026-03-10 15:23:54 -04:00
iptables_runner.go util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946) (#18947) 2026-03-10 15:23:54 -04:00
iptables.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
linuxfw.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables_for_svcs_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables_for_svcs.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables_runner_test.go util/linuxfw,wgengine/router: add connmark rules for rp_filter workaround (#18860) 2026-03-04 14:09:11 -05:00
nftables_runner.go util/linuxfw,wgengine/router: add connmark rules for rp_filter workaround (#18860) 2026-03-04 14:09:11 -05:00
nftables_types.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
nftables.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00