netfilter: nfnetlink_cthelper: reject too large userspace allocation requests
authorFlorian Westphal <fw@strlen.de>
Sat, 15 Apr 2017 23:29:16 +0000 (01:29 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 19 Apr 2017 15:55:17 +0000 (17:55 +0200)
commit157ffffeb5dc1b5bbeeef4d4349ab65ba5f42f4e
treef2809fb54dddf92e0bf52baa8dfeb452e9ac5863
parentdcf67740f22d31be685d7172f05b289c8243ea12
netfilter: nfnetlink_cthelper: reject too large userspace allocation requests

Userspace should not abuse the kernel to store large amounts of data,
reject requests larger than the private area can accommodate.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_cthelper.c