]> asedeno.scripts.mit.edu Git - linux.git/commit
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 18c0ab8) | patch
netfilter: nft_compat: do not dump private area
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 9 Oct 2018 18:06:36 +0000 (20:06 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 11 Oct 2018 09:29:53 +0000 (11:29 +0200)
commitd701d8117200399d85e63a737d2e4e897932f3b6
tree7a3d7c8160dda988d6c0f2b52f9cd6ca576dd15btree | snapshot
parent18c0ab87364ac5128a152055fdcb1d27e01caf01commit | diff
netfilter: nft_compat: do not dump private area

Zero pad private area, otherwise we expose private kernel pointer to
userspace. This patch also zeroes the tail area after the ->matchsize
and ->targetsize that results from XT_ALIGN().

Fixes: 0ca743a55991 ("netfilter: nf_tables: add compatibility layer for x_tables")
Reported-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_compat.c diff | blob | history
local clone of linux.git