From: Rahul Dadhich <r.dadhich@samsung.com>
Date: Wed, 28 Aug 2019 13:08:56 +0000 (+0530)
Subject: netfilter: xt_owner: bail out with EINVAL in case of unsupported flags
X-Git-Tag: submit/tizen_studio_4.5_p6.5/20220111.085032~25
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=97424c551a9eb8f44806da4fa6f7441c88c41f01;p=sdk%2Femulator%2Femulator-kernel.git

netfilter: xt_owner: bail out with EINVAL in case of unsupported flags

Change-Id: Ic83f49e526d564977622f69ff907fb6d928dc161
Signed-off-by: Rahul Dadhich <r.dadhich@samsung.com>
---

diff --git a/include/uapi/linux/netfilter/xt_owner.h b/include/uapi/linux/netfilter/xt_owner.h
index e7731dcc51f4..e5c670da2464 100644
--- a/include/uapi/linux/netfilter/xt_owner.h
+++ b/include/uapi/linux/netfilter/xt_owner.h
@@ -10,6 +10,11 @@ enum {
 	XT_OWNER_SUPPL_GROUPS = 1 << 3,
 };
 
+#define XT_OWNER_MASK	(XT_OWNER_UID | 	\
+			 XT_OWNER_GID | 	\
+			 XT_OWNER_SOCKET |	\
+			 XT_OWNER_SUPPL_GROUPS)
+
 struct xt_owner_match_info {
 	__u32 uid_min, uid_max;
 	__u32 gid_min, gid_max;
diff --git a/net/netfilter/xt_owner.c b/net/netfilter/xt_owner.c
index cbe64cf15304..88aa4bf86ac1 100644
--- a/net/netfilter/xt_owner.c
+++ b/net/netfilter/xt_owner.c
@@ -22,6 +22,9 @@ static int owner_check(const struct xt_mtchk_param *par)
 {
 	struct xt_owner_match_info *info = par->matchinfo;
 
+	if (info->match & ~XT_OWNER_MASK)
+		return -EINVAL;
+
 	/* For now only allow adding matches from the initial user namespace */
 	if ((info->match & (XT_OWNER_UID|XT_OWNER_GID)) &&
 	    (current_user_ns() != &init_user_ns))