From: Dan Carpenter Date: Wed, 12 Oct 2016 09:14:29 +0000 (+0300) Subject: netfilter: nf_tables: underflow in nft_parse_u32_check() X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=09525a09ad3099efd9ba49b0b90bddc350d6b53a;p=linux-beck.git netfilter: nf_tables: underflow in nft_parse_u32_check() We don't want to allow negatives here. Fixes: 36b701fae12a ('netfilter: nf_tables: validate maximum value of u32 netlink attributes') Signed-off-by: Dan Carpenter Signed-off-by: Pablo Neira Ayuso --- diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index b70d3ea1430e..24db22257586 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -4423,7 +4423,7 @@ static int nf_tables_check_loops(const struct nft_ctx *ctx, */ unsigned int nft_parse_u32_check(const struct nlattr *attr, int max, u32 *dest) { - int val; + u32 val; val = ntohl(nla_get_be32(attr)); if (val > max)