| commit | f0716cd6eb89f769bff3b37120219720c994bb7e | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Wed Mar 09 00:04:21 2016 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Fri Mar 11 11:37:56 2016 +0100 |
| tree | dfc12f5f0d234f4f6a8efb9e8b0299d485e29ea3 | |
| parent | d387eaf51f8c869a41d90474d3599d1e89826254 [diff] |
netfilter: nft_compat: check match/targetinfo attr size We copy according to ->target|matchsize, so check that the netlink attribute (which can include padding and might be larger) contains enough data. Reported-by: Julia Lawall <Julia.Lawall@lip6.fr> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>