projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0b9aefe) | patch
netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
authorEric Dumazet <edumazet@google.com>
Mon, 3 Apr 2017 17:55:11 +0000 (10:55 -0700)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 8 Apr 2017 20:24:19 +0000 (22:24 +0200)
commit2638fd0f92d4397884fd991d8f4925cb3f081901
treef7c6cce4be9a84861a75ee58a2106a23cd79b91atree | snapshot (tar.gz zip)
parent0b9aefea860063bb39e36bd7fe6c7087fed0ba87commit | diff
netfilter: xt_TCPMSS: add more sanity tests on tcph->doff

Denys provided an awesome KASAN report pointing to an use
after free in xt_TCPMSS

I have provided three patches to fix this issue, either in xt_TCPMSS or
in xt_tcpudp.c. It seems xt_TCPMSS patch has the smallest possible
impact.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Denys Fedoryshchenko <nuclearcat@nuclearcat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_TCPMSS.c diff | blob | blame | history