netfilter: nf_tables: out-of-bound check in chain blob

Browse source

[ Upstream commit 08e42a0d3a ]

Add current size of rule expressions to the boundary check.

Fixes: 2c865a8a28 ("netfilter: nf_tables: add rule blob layout")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Pablo Neira Ayuso 2023-06-06 16:32:44 +02:00 • committed by Greg Kroah-Hartman

parent fea199dbf6

commit 65f2def206

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

net/netfilter/nf_tables_api.c

View file