]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: xt_physdev: masks are not c-strings
authorFlorian Westphal <fw@strlen.de>
Fri, 10 Jul 2026 10:44:41 +0000 (12:44 +0200)
committerFlorian Westphal <fw@strlen.de>
Fri, 10 Jul 2026 14:28:47 +0000 (16:28 +0200)
commitf468c48d488d0ea2df3422b3e1dfafae1611e853
tree5d51b56d9084788cae8d18ab846c98bd02fa3fa3
parentb3fe4cbd583895987935a9bdad01c8f9d3a02310
netfilter: xt_physdev: masks are not c-strings

... and must not be subjected to the 'nul terminated' constraint.
If the interface name is 15 characters long, the mask is 16-bytes
'0xff' (to cover for \0) and the valid device name is rejected.

Fixes: 8df772afc9d0 ("netfilter: x_physdev: reject empty or not-nul terminated device names")
Cc: stable@vger.kernel.org
Closes: https://bugs.launchpad.net/neutron/+bug/2159935
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/xt_physdev.c