From: Jan Engelhardt <jengelh@inai.de>
Date: Sun, 23 Jul 2017 18:01:46 +0000 (+0200)
Subject: DNETMAP: fix write past end of buffer
X-Git-Tag: v2.14~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b565a85fb6e33ca79a0a3fc05bd66aa77d0d70d8;p=thirdparty%2Fxtables-addons.git

DNETMAP: fix write past end of buffer
---

diff --git a/extensions/xt_DNETMAP.c b/extensions/xt_DNETMAP.c
index 21bbab5..192f21d 100644
--- a/extensions/xt_DNETMAP.c
+++ b/extensions/xt_DNETMAP.c
@@ -398,7 +398,7 @@ dnetmap_tg(struct sk_buff *skb, const struct xt_action_param *par)
 		/* if prefix is specified, we check if
 		it matches lookedup entry */
 		if (tginfo->flags & XT_DNETMAP_PREFIX)
-			if (memcmp(mr, &e->prefix, sizeof(*mr)))
+			if (memcmp(mr, &e->prefix->prefix, sizeof(*mr)))
 				goto no_rev_map;
 		/* don't reset ttl if flag is set */
 		if (jttl >= 0 && (! (e->flags & XT_DNETMAP_STATIC) ) ) {