ebtables: Fix for potential array boundary overstep

Fix the parameter check in nft_ebt_standard_target() to avoid an array
out of bounds access in ebt_standard_targets.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>

diff --git a/iptables/nft-bridge.h b/iptables/nft-bridge.h
index 1fe26bab4feb55efa3ce1e750515ef84e721c97c..9d49ccbef0961d8104274bf2990f3ba9adb2fee3 100644 (file)
--- a/iptables/nft-bridge.h
+++ b/iptables/nft-bridge.h
@@ -78,7 +78,7 @@ static const char *ebt_standard_targets[NUM_STANDARD_TARGETS] = {
 
 static inline const char *nft_ebt_standard_target(unsigned int num)
 {
-       if (num > NUM_STANDARD_TARGETS)
+       if (num >= NUM_STANDARD_TARGETS)
                return NULL;
 
        return ebt_standard_targets[num];