git.ipfire.org Git - thirdparty/kernel/stable.git/commit

]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit

projects / thirdparty / kernel / stable.git / commit

author	Florian Westphal <fw@strlen.de>
	Fri, 1 Apr 2016 12:17:26 +0000 (14:17 +0200)
committer	Greg Kroah-Hartman <gregkh@linuxfoundation.org>
	Fri, 24 Jun 2016 17:15:30 +0000 (10:15 -0700)
commit	726ee5ed2d8b2ae00e21b4b261f6311215683aff
tree	8763edacaf6ae2374481602e57c76f468e3b5821	tree
parent	412f0324bf5f7d719ee0cf8d9610745b1a11cb7b	commit \| diff

netfilter: x_tables: add compat version of xt_check_entry_offsets

commit fc1221b3a163d1386d1052184202d5dc50d302d1 upstream.

32bit rulesets have different layout and alignment requirements, so once
more integrity checks get added to xt_check_entry_offsets it will reject
well-formed 32bit rulesets.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

RSS Atom

include/linux/netfilter/x_tables.h		diff \| blob \| blame \| history
net/ipv4/netfilter/arp_tables.c		diff \| blob \| blame \| history
net/ipv4/netfilter/ip_tables.c		diff \| blob \| blame \| history
net/ipv6/netfilter/ip6_tables.c		diff \| blob \| blame \| history
net/netfilter/x_tables.c		diff \| blob \| blame \| history