]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a4d9c1) | patch
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 7 Sep 2022 08:26:18 +0000 (10:26 +0200)
committerFlorian Westphal <fw@strlen.de>
Wed, 7 Sep 2022 13:55:28 +0000 (15:55 +0200)
commitcf16113b65bbd6dd2c966039d8e17338196a4a7a
treeed43b6765f451d17cb6fb2f85a98921a19fe6cdctree | snapshot
parent1a4d9c173aca24ccb5b9020fc191aa005486e44bcommit | diff
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.

Fixes: 32660bfd7e29 ("netfilter: nft_osf: Add version option support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nfnetlink_osf.c diff | blob | history
Linux Kernel Source Tree.