netfilter: x_tables: check for size overflow
authorFlorian Westphal <fw@strlen.de>
Thu, 10 Mar 2016 00:56:23 +0000 (01:56 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 12 Mar 2016 10:55:01 +0000 (11:55 +0100)
commitd157bd761585605b7882935ffb86286919f62ea1
tree993900c74587138194c1689aed4e1bed6c97958b
parentf0716cd6eb89f769bff3b37120219720c994bb7e
netfilter: x_tables: check for size overflow

Ben Hawkes says:
 integer overflow in xt_alloc_table_info, which on 32-bit systems can
 lead to small structure allocation and a copy_from_user based heap
 corruption.

Reported-by: Ben Hawkes <hawkes@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/x_tables.c
This page took 0.028779 seconds and 5 git commands to generate.