]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nfnetlink_log: fix maximum packet length logged to userspace
authorFlorian Westphal <fw@strlen.de>
Thu, 23 Oct 2014 08:36:07 +0000 (10:36 +0200)
committerJiri Slaby <jslaby@suse.cz>
Wed, 19 Nov 2014 17:38:25 +0000 (18:38 +0100)
commit45ebf3641319166e3a6c468eeeac48aa4d6d567d
treee9307f5fd61de9cf9ba963a65f08e0b6ba29da19
parent131172845aa2c804ffa9423455aee585061ea35e
netfilter: nfnetlink_log: fix maximum packet length logged to userspace

commit c1e7dc91eed0ed1a51c9b814d648db18bf8fc6e9 upstream.

don't try to queue payloads > 0xffff - NLA_HDRLEN, it does not work.
The nla length includes the size of the nla struct, so anything larger
results in u16 integer overflow.

This patch is similar to
9cefbbc9c8f9abe (netfilter: nfnetlink_queue: cleanup copy_range usage).

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
net/netfilter/nfnetlink_log.c