]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c96e2da) | patch
netfilter: nft_range: validate operation netlink attribute
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 13 Oct 2016 06:42:17 +0000 (08:42 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Oct 2016 16:57:02 +0000 (18:57 +0200)
commitd7e13cca430fac5bdb39217b74a2be8067239fc4
tree5288ff52b3888084f4462615a842e76c0d2302b3tree | snapshot
parentc96e2da02fc31e166b2b0ae2b2d228245bb10bf5commit | diff
netfilter: nft_range: validate operation netlink attribute

Use nft_parse_u32_check() to make sure we don't get a value over the
unsigned 8-bit integer. Moreover, make sure this value doesn't go over
the two supported range comparison modes.

Fixes: 9286c2eb1fda ("netfilter: nft_range: validate operation netlink attribute")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_range.c diff | blob | history
Linux Kernel Source Tree.