]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1d1201a) | patch
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 7 Sep 2022 08:26:18 +0000 (10:26 +0200)
committerFlorian Westphal <fw@strlen.de>
Wed, 7 Sep 2022 13:55:28 +0000 (15:55 +0200)
commit4fe4156c885d70986fb84c8e42d8e334a9457baf
treeed43b6765f451d17cb6fb2f85a98921a19fe6cdctree | snapshot
parent1d1201a4d841c1bd8225562085bf9b419252aaf7commit | diff
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.

Fixes: f0c7ede2821c ("netfilter: nft_osf: Add version option support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nfnetlink_osf.c diff | blob | history
Linux Kernel Source Tree.