]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 53cd8f5) | patch
netfilter: nf_tables: out-of-bound check in chain blob
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 6 Jun 2023 14:32:44 +0000 (16:32 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 14 Jun 2023 09:16:49 +0000 (11:16 +0200)
commitd2d15270080824c30a6a395ad0912c5db7f5a64d
tree8157ee012aec8dc293527c2140fc388cac7e552ftree
parent53cd8f588f6df5b760a8b678c940db467f5310dccommit | diff
netfilter: nf_tables: out-of-bound check in chain blob

[ Upstream commit 08e42a0d3ad30f276f9597b591f975971a1b0fcf ]

Add current size of rule expressions to the boundary check.

Fixes: 2c865a8a28a1 ("netfilter: nf_tables: add rule blob layout")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git