]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: x_tables: check for size overflow
authorFlorian Westphal <fw@strlen.de>
Thu, 10 Mar 2016 00:56:23 +0000 (01:56 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 12 Mar 2016 10:55:01 +0000 (11:55 +0100)
commit8260556aa0d20c6691cb3880f846cfc82b90f7ac
tree993900c74587138194c1689aed4e1bed6c97958b
parent32d21487b8ca29eff487d510daf8390288100f55
netfilter: x_tables: check for size overflow

Ben Hawkes says:
 integer overflow in xt_alloc_table_info, which on 32-bit systems can
 lead to small structure allocation and a copy_from_user based heap
 corruption.

Reported-by: Ben Hawkes <hawkes@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/x_tables.c