projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c9704c2) | patch
netfilter: nf_tables: bail out on mismatching dynset and set expressions
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Dec 2023 13:25:33 +0000 (14:25 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 13 Dec 2023 17:39:11 +0000 (18:39 +0100)
commit96f8654b701f772af5f358b91807ce2836ff3444
treecf96fcadd7e142bd37ae5227f912cd4d9264eddftree | snapshot
parentc9704c26193c3fdfa69ccf5a0883847e1b92034dcommit | diff
netfilter: nf_tables: bail out on mismatching dynset and set expressions

[ Upstream commit 3701cd390fd731ee7ae8b8006246c8db82c72bea ]

If dynset expressions provided by userspace is larger than the declared
set expressions, then bail out.

Fixes: 48b0ae046ee9 ("netfilter: nftables: netlink support for several set element expressions")
Reported-by: Xingyuan Mo <hdthky0@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_dynset.c diff | blob | history
Domain: System / Kernel;