]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions
authorGao Feng <fgao@ikuai8.com>
Tue, 13 Sep 2016 00:49:18 +0000 (08:49 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 13 Sep 2016 08:50:56 +0000 (10:50 +0200)
commitbac4f3b4da7aa092d35d7371269f50d0a1e8fc6c
tree0fd1a6441ee46cc957ec089b158af8ca0efa90f8
parent2758447b49828e5b2b5b23ce4704f58de6a683f5
netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions

When memory is exhausted, nfct_seqadj_ext_add may fail to add the
synproxy and seqadj extensions. The function nf_ct_seqadj_init doesn't
check if get valid seqadj pointer by the nfct_seqadj.

Now drop the packet directly when fail to add seqadj extension to
avoid dereference NULL pointer in nf_ct_seqadj_init from
init_conntrack().

Signed-off-by: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack_synproxy.h
net/netfilter/nf_conntrack_core.c
net/netfilter/nf_nat_core.c