netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path
authorChen Gang <gang.chen@asianux.com>
Thu, 23 May 2013 01:50:46 +0000 (01:50 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 23 May 2013 12:25:40 +0000 (14:25 +0200)
commit4f36ea6eed2081340c7a7aa98c73187ecfccebff
tree295b214d5b19811ae7ffe450402af412daf109c8
parent2a7851bffb008ff4882eee673da74718997b4265
netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path

If nf_log uses ipt_ULOG as logging output, we can deliver non-null
terminated strings to user-space since the maximum length of the
prefix that is passed by nf_log is NF_LOG_PREFIXLEN but pm->prefix
is 32 bytes long (ULOG_PREFIX_LEN).

This is actually happening already from nf_conntrack_tcp if ipt_ULOG
is used, since it is passing strings longer than 32 bytes.

Signed-off-by: Chen Gang <gang.chen@asianux.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/ipt_ULOG.c