]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle()
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 7 Dec 2019 17:38:12 +0000 (18:38 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 9 Dec 2019 19:07:59 +0000 (20:07 +0100)
commit513f32e36a2cf0628b0dfc053fd98affba8e245c
tree8b838e138eece4155a62755c08c1a473f5dcdbca
parentace249198c800ed0bc0cac04059164975020f530
netfilter: nf_flow_table_offload: Correct memcpy size for flow_overload_mangle()

In function 'memcpy',
     inlined from 'flow_offload_mangle' at net/netfilter/nf_flow_table_offload.c:112:2,
     inlined from 'flow_offload_port_dnat' at net/netfilter/nf_flow_table_offload.c:373:2,
     inlined from 'nf_flow_rule_route_ipv4' at net/netfilter/nf_flow_table_offload.c:424:3:
./include/linux/string.h:376:4: error: call to '__read_overflow2' declared with attribute error: detected read beyond size of object passed as 2nd parameter
   376 |    __read_overflow2();
       |    ^~~~~~~~~~~~~~~~~~

The original u8* was done in the hope to make this more adaptable but
consensus is to keep this like it is in tc pedit.

Fixes: c550be63df75 ("netfilter: nf_flow_table: hardware offload support")
Reported-by: Laura Abbott <labbott@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_offload.c