projects / platform / kernel / linux-rpi3.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9314011) | patch
netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 24 Mar 2016 20:29:53 +0000 (21:29 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 28 Mar 2016 15:59:24 +0000 (17:59 +0200)
commitb301f2538759933cf9ff1f7c4f968da72e3f0757
tree72abfa9ac2ab4f4b5c189834fdc9a7452b8edd26tree | snapshot
parent931401137f60fc299256bbc221c0b756be31c32ccommit | diff
netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES

Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
in ebtables and all the x_tables variants and their respective compat
code. Uncovered by KASAN.

Reported-by: Baozeng Ding <sploving1@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/netfilter/ebtables.c diff | blob | history
net/ipv4/netfilter/arp_tables.c diff | blob | history
net/ipv4/netfilter/ip_tables.c diff | blob | history
net/ipv6/netfilter/ip6_tables.c diff | blob | history
Domain: System / Kernel; Licenses: GPL-2.0;