projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cf6b5ff) | patch
netfilter: nfnetlink_hook: fix array index out-of-bounds error
authorColin Ian King <colin.king@canonical.com>
Tue, 8 Jun 2021 15:34:08 +0000 (16:34 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 9 Jun 2021 19:28:50 +0000 (21:28 +0200)
commit5302560bb49d38bf6e62a47c44e19ef04bd5344d
treec67606d85188f76a34746f25fe94f3f6697f39a4tree | snapshot
parentcf6b5ffdce5a78b2fcb0e53b3a2487c490bcbf7fcommit | diff
netfilter: nfnetlink_hook: fix array index out-of-bounds error

Currently the array net->nf.hooks_ipv6 is accessed by index hook
before hook is sanity checked. Fix this by moving the sanity check
to before the array access.

Addresses-Coverity: ("Out-of-bounds access")
Fixes: e2cf17d3774c ("netfilter: add new hook nfnl subsystem")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_hook.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git