]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
authorEric Dumazet <edumazet@google.com>
Thu, 25 Jan 2018 01:16:09 +0000 (17:16 -0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 25 Jan 2018 11:31:34 +0000 (12:31 +0100)
commit64abaf17c4481cf39fe7a46cc24d2fae3ff30838
tree18783216423e8a3bbf86391b2e940424c0b2dba4
parente2fd3fa3946c97b268606d2842ffdd90f5212920
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}

It looks like syzbot found its way into netfilter territory.

Issue here is that @name comes from user space and might
not be null terminated.

Out-of-bound reads happen, KASAN is not happy.

v2 added similar fix for xt_request_find_target(),
as Florian advised.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/x_tables.c