]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: check return code from nla_parse_tested
authorDaniel Borkmann <dborkman@redhat.com>
Wed, 12 Jun 2013 15:54:51 +0000 (17:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 20 Jun 2013 09:20:13 +0000 (11:20 +0200)
commit5535795c71dc1b7a4bd9ffb6897a8c024f892334
tree79f5f278a8c98d2c569772bb5f7d72836da795d3
parent49893123657af27845db136dcf0c31f0fef6b130
netfilter: check return code from nla_parse_tested

These are the only calls under net/ that do not check nla_parse_nested()
for its error code, but simply continue execution. If parsing of netlink
attributes fails, we should return with an error instead of continuing.
In nearly all of these calls we have a policy attached, that is being
type verified during nla_parse_nested(), which we would miss checking
for otherwise.

Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_netlink.c
net/netfilter/nfnetlink_cthelper.c
net/netfilter/nfnetlink_cttimeout.c