projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 63331e3) | patch
netfilter: nf_tables: bail out on mismatching dynset and set expressions
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Dec 2023 13:25:33 +0000 (14:25 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 6 Dec 2023 16:15:43 +0000 (17:15 +0100)
commit3701cd390fd731ee7ae8b8006246c8db82c72bea
tree51b3db1e49b10a07b54ea4133294a3826e1f7f55tree | snapshot
parent63331e37fb227e796894b31d713697612c8dee7fcommit | diff
netfilter: nf_tables: bail out on mismatching dynset and set expressions

If dynset expressions provided by userspace is larger than the declared
set expressions, then bail out.

Fixes: 48b0ae046ee9 ("netfilter: nftables: netlink support for several set element expressions")
Reported-by: Xingyuan Mo <hdthky0@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_dynset.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git