36b701fae12ac763a568037e4e7c96b5727a8b3e - kernel/msm-4.9

commit	36b701fae12ac763a568037e4e7c96b5727a8b3e	[log] [tgz]
author	Laura Garcia Liebana <nevola@gmail.com>	Wed Sep 14 15:00:02 2016 +0200
committer	Pablo Neira Ayuso <pablo@netfilter.org>	Fri Sep 23 09:29:02 2016 +0200
tree	51cf6649e755c9ee786cfdbbd9d03a6d22baf37c
parent	2b03bf732488a3c2e920afe22c03b82cb8477e28 [diff]

netfilter: nf_tables: validate maximum value of u32 netlink attributes

Fetch value and validate u32 netlink attribute. This validation is
usually required when the u32 netlink attributes are being stored in a
field whose size is smaller.

This patch revisits 4da449ae1df9 ("netfilter: nft_exthdr: Add size check
on u8 nft_exthdr attributes").

Fixes: 96518518cc41 ("netfilter: add nftables")
Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

include/net/netfilter/nf_tables.h[diff]
net/netfilter/nf_tables_api.c[diff]
net/netfilter/nft_bitwise.c[diff]
net/netfilter/nft_byteorder.c[diff]
net/netfilter/nft_cmp.c[diff]
net/netfilter/nft_exthdr.c[diff]
net/netfilter/nft_immediate.c[diff]

7 files changed

tree: 51cf6649e755c9ee786cfdbbd9d03a6d22baf37c