| commit | 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Tue Mar 22 18:02:50 2016 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Mar 28 17:59:08 2016 +0200 |
| tree | 381afe4030c7f934e3fbdb7bf3c9686d28492c13 | |
| parent | bdf533de6968e9686df777dc178486f600c6e617 [diff] |
netfilter: x_tables: make sure e->next_offset covers remaining blob size Otherwise this function may read data beyond the ruleset blob. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>