]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 80864fb) | patch
netfilter: cttimeout: fix buffer overflow
authorFlorian Westphal <fw@strlen.de>
Wed, 21 Nov 2012 01:37:38 +0000 (01:37 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 21 Nov 2012 22:50:14 +0000 (23:50 +0100)
commit97fa505b7527e6609e58e51c5c7cdd01657fa257
tree803a3d7270e04f520474ecec895f8e7f5f05644ctree | snapshot
parent80864fb2d94ef4f3ee1811738776f987fb7906c8commit | diff
netfilter: cttimeout: fix buffer overflow

Chen Gang reports:
the length of nla_data(cda[CTA_TIMEOUT_NAME]) is not limited in server side.

And indeed, its used to strcpy to a fixed-sized buffer.

Fortunately, nfnetlink users need CAP_NET_ADMIN.

Reported-by: Chen Gang <gang.chen@asianux.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_cttimeout.c diff | blob | history
Linux Kernel Source Tree.