]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: validate maximum value of u32 netlink attributes
authorLaura Garcia Liebana <nevola@gmail.com>
Wed, 14 Sep 2016 13:00:02 +0000 (15:00 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 23 Sep 2016 07:29:02 +0000 (09:29 +0200)
commit0ac0eef6b02ce77f5a034ab4ed692b4d156c1aa7
tree51cf6649e755c9ee786cfdbbd9d03a6d22baf37c
parent2bb8f84b5d199d7407c334816115219c98552856
netfilter: nf_tables: validate maximum value of u32 netlink attributes

Fetch value and validate u32 netlink attribute. This validation is
usually required when the u32 netlink attributes are being stored in a
field whose size is smaller.

This patch revisits 61de4d926247 ("netfilter: nft_exthdr: Add size check
on u8 nft_exthdr attributes").

Fixes: 4a4835e91e03 ("netfilter: add nftables")
Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c
net/netfilter/nft_bitwise.c
net/netfilter/nft_byteorder.c
net/netfilter/nft_cmp.c
net/netfilter/nft_exthdr.c
net/netfilter/nft_immediate.c