projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fea199d) | patch
netfilter: nf_tables: out-of-bound check in chain blob
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 6 Jun 2023 14:32:44 +0000 (16:32 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 14 Jun 2023 09:15:20 +0000 (11:15 +0200)
commit65f2def2066255eb9ee6cbfe2961ed09e913ea9b
treea4c90096b2e4c7656fea3b8526ef1fb680090df4tree | snapshot
parentfea199dbf6c116162deaa979184282a94689923dcommit | diff
netfilter: nf_tables: out-of-bound check in chain blob

[ Upstream commit 08e42a0d3ad30f276f9597b591f975971a1b0fcf ]

Add current size of rule expressions to the boundary check.

Fixes: 2c865a8a28a1 ("netfilter: nf_tables: add rule blob layout")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c diff | blob | history
Domain: System / Kernel;