| commit | 0f9f5e1b83abd2b37c67658e02a6fc9001831fa5 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Oct 21 11:28:12 2014 +0300 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Oct 22 14:12:50 2014 +0200 |
| tree | 52e37b5829240e5d18b196831f25f338db3745cf | |
| parent | e37ad9fd636071e45368d1d9cc3b7b421281ce7f [diff] |
netfilter: ipset: off by one in ip_set_nfnl_get_byindex() The ->ip_set_list[] array is initialized in ip_set_net_init() and it has ->ip_set_max elements so this check should be >= instead of > otherwise we are off by one. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>