projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0608074) | patch
netfilter: x_tables: make sure e->next_offset covers remaining blob size
authorFlorian Westphal <fw@strlen.de>
Tue, 22 Mar 2016 17:02:50 +0000 (18:02 +0100)
committerWilly Tarreau <w@1wt.eu>
Sun, 21 Aug 2016 15:26:12 +0000 (17:26 +0200)
commit74afad874aaeef7ef5b500366a0e271fb5b265c3
treee24682a753cdd4a02ce56f20b3330edd9ea4733atree | snapshot (tar.gz zip)
parent0608074c2c1fd874b10117c07b2751d2477bec14commit | diff
netfilter: x_tables: make sure e->next_offset covers remaining blob size

commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 upstream.

Otherwise this function may read data beyond the ruleset blob.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Willy Tarreau <w@1wt.eu>
net/ipv4/netfilter/arp_tables.c diff | blob | blame | history
net/ipv4/netfilter/ip_tables.c diff | blob | blame | history
net/ipv6/netfilter/ip6_tables.c diff | blob | blame | history
kernel source for telekom puls (alcatel/mediatek)