]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 25851df) | patch
payload: assert when accessing inner transport header
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 4 Jan 2015 22:22:57 +0000 (23:22 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 4 Jan 2015 22:27:00 +0000 (23:27 +0100)
commitc8eeefb1d33c989493bf526a53a56f1f92fb87e3
tree2211776d75e43671a454536d633da48896fd4dcatree | snapshot
parent25851df85e85d91469ce7aa03f1eaaa5ff2c9245commit | diff
payload: assert when accessing inner transport header

Instead of segfaulting due to out of bound access access to protocol
context array ctx->protocol[base].location from proto_ctx_update().

 # nft add rule filter input ah nexthdr tcp
 nft: payload.c:88: payload_expr_pctx_update: Assertion `left->payload.base + 1 <= (__PROTO_BASE_MAX - 1)' failed.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/payload.c diff | blob | blame | history
Mirror of git://git.netfilter.org/nftables