]> git.karo-electronics.de Git - linux-beck.git/commit
projects / linux-beck.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 486dcf4) | patch
netfilter: nft_hash: validate maximum value of u32 netlink hash attribute
authorLaura Garcia Liebana <nevola@gmail.com>
Mon, 14 Nov 2016 21:33:34 +0000 (22:33 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 24 Nov 2016 13:40:03 +0000 (14:40 +0100)
commitabd66e9f3cc50c9c3ba4cf609749374090a2f215
treee9266a52b4af3fda805bbbb04a466fab69f4c8b9tree | snapshot
parent486dcf43da7815baa615822f3e46883ccca5400fcommit | diff
netfilter: nft_hash: validate maximum value of u32 netlink hash attribute

Use the function nft_parse_u32_check() to fetch the value and validate
the u32 attribute into the hash len u8 field.

This patch revisits 4da449ae1df9 ("netfilter: nft_exthdr: Add size check
on u8 nft_exthdr attributes").

Fixes: cb1b69b0b15b ("netfilter: nf_tables: add hash expression")
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_hash.c diff | blob | history
Beck SC1x5 Kernel