fail closed in wolfIP filter glue

Author: JeremiahM37

src/wolfip/packet_filter_glue.c

@@ -163,6 +163,9 @@ static int wolfip_dispatch_event(
     if (WOLFSENTRY_THREAD_TAILER(WOLFSENTRY_THREAD_FLAG_NONE) < 0)
         return -WOLFIP_EACCES;
 
+    if (ws_ret < 0)
+        return -WOLFIP_EACCES;
+
     if (wolfip_action_rejects(*action_results))
         return -WOLFIP_EACCES;
 
@@ -209,7 +212,7 @@ static int wolfip_filter_ethernet(
         action_results = WOLFSENTRY_ACTION_RES_SOCK_ERROR;
         break;
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 
     wolfip_set_link_sockaddrs(&remote.remote, &local.local, event, outbound);
@@ -261,7 +264,7 @@ static int wolfip_filter_ipv4(
         action_results = WOLFSENTRY_ACTION_RES_SOCK_ERROR;
         break;
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 
     wolfip_set_ipv4_sockaddrs(&remote.remote, &local.local, event, outbound);
@@ -360,7 +363,7 @@ static int wolfip_filter_tcp(
         action_results = WOLFSENTRY_ACTION_RES_DEROGATORY;
         break;
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 
     wolfip_set_ipv4_sockaddrs(&remote.remote, &local.local, event, outbound);
@@ -442,7 +445,7 @@ static int wolfip_filter_udp(
             WOLFSENTRY_ACTION_RES_EXCLUDE_REJECT_ROUTES;
         break;
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 
     wolfip_set_ipv4_sockaddrs(&remote.remote, &local.local, event, outbound);
@@ -504,7 +507,7 @@ static int wolfip_filter_icmp(
         action_results = WOLFSENTRY_ACTION_RES_SOCK_ERROR;
         break;
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 
     wolfip_set_ipv4_sockaddrs(&remote.remote, &local.local, event, outbound);
@@ -519,7 +522,7 @@ static int wolfip_filter_with_wolfsentry(void *arg, const struct wolfIP_filter_e
     struct wolfsentry_context *wolfsentry = (struct wolfsentry_context *)arg;
 
     if ((wolfsentry == NULL) || (event == NULL))
-        return 0;
+        return -WOLFIP_EACCES;
 
     switch (event->meta.ip_proto) {
     case WOLFIP_FILTER_PROTO_ETH:
@@ -533,7 +536,7 @@ static int wolfip_filter_with_wolfsentry(void *arg, const struct wolfIP_filter_e
     case WOLFIP_FILTER_PROTO_ICMP:
         return wolfip_filter_icmp(wolfsentry, event);
     default:
-        return 0;
+        return -WOLFIP_EACCES;
     }
 }