Merge pull request #13 from pmillerchip/master

Fix potential null pointer dereference in netfilter

1 files changed, 1 insertions, 1 deletions

diff --git a/src/firejail/netfilter.c b/src/firejail/netfilter.c
index dbed4ac30..fd8a9b2f3 100644
--- a/src/firejail/netfilter.c
+++ b/src/firejail/netfilter.c
@@ -67,9 +67,9 @@ void netfilter(const char *fname) {
                 }
 
                 filter = malloc(s.st_size + 1);   // + '\0'
-                memset(filter, 0, s.st_size + 1);
                 if (!filter)
                         errExit("malloc");
+                memset(filter, 0, s.st_size + 1);
 
                 /* coverity[toctou] */
                 FILE *fp = fopen(fname, "r");