Dan Carpenter aeadd93f2b net: sched: act_ipt: check for underflow in __tcf_ipt_init() ...

If "td->u.target_size" is larger than sizeof(struct xt_entry_target) we
return -EINVAL.  But we don't check whether it's smaller than
sizeof(struct xt_entry_target) and that could lead to an out of bounds
read.

Fixes: 7ba699c604 ("[NET_SCHED]: Convert actions from rtnetlink to new netlink API")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-10-01 22:34:14 -07:00

11 KiB

Raw Blame History

View Raw