projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bffc124) | patch
netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Dec 2019 21:09:14 +0000 (22:09 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 9 Dec 2019 12:14:03 +0000 (13:14 +0100)
commit0d2c96af797ba149e559c5875c0151384ab6dd14
treef7bdfa04d63e35348b2b8160841518207119975btree | snapshot
parentbffc124b6fe37d0ae9b428d104efb426403bb5c9commit | diff
netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()

Userspace might bogusly sent NFT_DATA_VERDICT in several netlink
attributes that assume NFT_DATA_VALUE. Moreover, make sure that error
path invokes nft_data_release() to decrement the reference count on the
chain object.

Fixes: 96518518cc41 ("netfilter: add nftables")
Fixes: 0f3cd9b36977 ("netfilter: nf_tables: add range expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | history
net/netfilter/nft_bitwise.c diff | blob | history
net/netfilter/nft_cmp.c diff | blob | history
net/netfilter/nft_range.c diff | blob | history
Domain: System / Kernel;