| commit | 5f7da4d26d421f3bdf10c3bbdb86ffc3a12a84f2 | [log] [tgz] |
|---|---|---|
| author | Patrick McHardy <kaber@trash.net> | Mon Apr 14 11:15:52 2008 +0200 |
| committer | Patrick McHardy <kaber@trash.net> | Mon Apr 14 11:15:52 2008 +0200 |
| tree | 67c6cbeaa4005d5410d2f9dd02b9802b6ddf8beb | |
| parent | dd13b010368f85dfa59364ba87bfe8ae930b2832 [diff] |
[NETFILTER]: nf_conntrack_tcp: catch invalid state updates over ctnetlink Invalid states can cause out-of-bound memory accesses of the state table. Also don't insist on having a new state contained in the netlink message. Signed-off-by: Patrick McHardy <kaber@trash.net>