projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e37ad9f) | patch
netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 21 Oct 2014 08:28:12 +0000 (11:28 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 Oct 2014 12:12:50 +0000 (14:12 +0200)
commit0f9f5e1b83abd2b37c67658e02a6fc9001831fa5
tree52e37b5829240e5d18b196831f25f338db3745cftree | snapshot (tar.gz zip)
parente37ad9fd636071e45368d1d9cc3b7b421281ce7fcommit | diff
netfilter: ipset: off by one in ip_set_nfnl_get_byindex()

The ->ip_set_list[] array is initialized in ip_set_net_init() and it
has ->ip_set_max elements so this check should be >= instead of >
otherwise we are off by one.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_core.c diff | blob | blame | history