]> git.baikalelectronics.ru Git - kernel.git/commit
nfnetlink: do not ack malformed messages
authorJiri Benc <jbenc@redhat.com>
Thu, 7 Nov 2013 18:59:19 +0000 (19:59 +0100)
committerDavid S. Miller <davem@davemloft.net>
Fri, 8 Nov 2013 20:12:11 +0000 (15:12 -0500)
commit1399ee9ff875a8d98a877ea3ff010cfc5c8f0bc0
treeadaff9745719732f3ff93abae3f52fa94b80db18
parentde99116eeb16e3fae65af0981e1df3e670514013
nfnetlink: do not ack malformed messages

Commit 438acf468393 ("netfilter: nfnetlink: add batch support and use it
from nf_tables") introduced a bug leading to various crashes in netlink_ack
when netlink message with invalid nlmsg_len was sent by an unprivileged
user.

Signed-off-by: Jiri Benc <jbenc@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netfilter/nfnetlink.c