]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9f3effd) | patch
netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 21 Oct 2014 08:28:12 +0000 (11:28 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 Oct 2014 12:12:50 +0000 (14:12 +0200)
commit50ed71e3cfb2b1194d5a295fad2d0729c1bd354c
tree52e37b5829240e5d18b196831f25f338db3745cftree | snapshot
parent9f3effd18af36da3ce7d5e019bdee248988e68b5commit | diff
netfilter: ipset: off by one in ip_set_nfnl_get_byindex()

The ->ip_set_list[] array is initialized in ip_set_net_init() and it
has ->ip_set_max elements so this check should be >= instead of >
otherwise we are off by one.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_core.c diff | blob | history
Linux Kernel Source Tree.