projects / wrapfs-4.14.y.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: dc385be) | patch
netfilter: x_tables: make sure e->next_offset covers remaining blob size
authorFlorian Westphal <fw@strlen.de>
Tue, 22 Mar 2016 17:02:50 +0000 (18:02 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 30 Apr 2016 22:06:10 +0000 (00:06 +0200)
commit113ec64467f005e175f3de2cec1d581e8c7b69ef
tree0c4dec63d3a09946a8053b71abd42d9d93628693tree | snapshot
parentdc385be2ea9842289d27ac3e187a51b6f3d28559commit | diff
netfilter: x_tables: make sure e->next_offset covers remaining blob size

commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 upstream.

Otherwise this function may read data beyond the ruleset blob.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
net/ipv4/netfilter/arp_tables.c diff | blob | history
net/ipv4/netfilter/ip_tables.c diff | blob | history
net/ipv6/netfilter/ip6_tables.c diff | blob | history
wrapfs-4.14.y