]> asedeno.scripts.mit.edu Git - linux.git/commit
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}
authorEric Dumazet <edumazet@google.com>
Thu, 25 Jan 2018 01:16:09 +0000 (17:16 -0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 25 Jan 2018 11:31:34 +0000 (12:31 +0100)
commitda17c73b6eb74aad3c3c0654394635675b623b3e
tree18783216423e8a3bbf86391b2e940424c0b2dba4
parent889c604fd0b5f6d3b8694ade229ee44124de1127
netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}

It looks like syzbot found its way into netfilter territory.

Issue here is that @name comes from user space and might
not be null terminated.

Out-of-bound reads happen, KASAN is not happy.

v2 added similar fix for xt_request_find_target(),
as Florian advised.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/x_tables.c