]> git.ipfire.org Git - thirdparty/iproute2.git/commit
tc: flower: Fix buffer overflow on large labels
authorPaul Blakey <paulb@nvidia.com>
Sun, 5 Dec 2021 13:20:25 +0000 (15:20 +0200)
committerStephen Hemminger <stephen@networkplumber.org>
Mon, 6 Dec 2021 21:44:50 +0000 (13:44 -0800)
commit73590d9573148804034a88ceb2f6b7ca1545561f
tree18b9bfc40f1de0cfff212e87e1a8cf4264724ddb
parent3f77bc62533c0b50da135e3f90ae6549b012d1ed
tc: flower: Fix buffer overflow on large labels

Buffer is 64bytes, but label printing can take 66bytes printing
in hex, and will overflow when setting the string delimiter ('\0').

Fix that by increasing the print buffer size.

Example of overflowing ct_label:
ct_label 11111111111111111111111111111111/11111111111111111111111111111111

Fixes: 2fffb1c03056 ("tc: flower: Add matching on conntrack info")
Signed-off-by: Paul Blakey <paulb@nvidia.com>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
tc/f_flower.c