projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6be3bcd) | patch
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
authorCong Wang <xiyou.wangcong@gmail.com>
Wed, 31 Jan 2018 23:02:47 +0000 (15:02 -0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 2 Feb 2018 17:26:37 +0000 (18:26 +0100)
commitba7cd5d95f25cc6005f687dabdb4e7a6063adda9
tree8301371a48f9eb2fcfc3d72fb3c945d47793efaftree | snapshot
parent6be3bcd75afb673a37a82e18ba46d50430f172c1commit | diff
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()

xt_cgroup_info_v1->priv is an internal pointer only used for kernel,
we should not trust what user-space provides.

Reported-by: <syzbot+4fbcfcc0d2e6592bd641@syzkaller.appspotmail.com>
Fixes: c38c4597e4bf ("netfilter: implement xt_cgroup cgroup2 path match")
Cc: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_cgroup.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git