| commit | 78296c97ca1fd3b104f12e1f1fbc06c46635990b | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <edumazet@google.com> | Sun Feb 15 19:03:45 2015 -0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Feb 16 17:00:48 2015 +0100 |
| tree | bb6b737655d6412e4fb49c0a746f743691e81a24 | |
| parent | cef9ed86ed62eeffcd017882278bbece32001f86 [diff] |
netfilter: xt_socket: fix a stack corruption bug
As soon as extract_icmp6_fields() returns, its local storage (automatic
variables) is deallocated and can be overwritten.
Lets add an additional parameter to make sure storage is valid long
enough.
While we are at it, adds some const qualifiers.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Fixes: b64c9256a9b76 ("tproxy: added IPv6 support to the socket match")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>