diff options
| author | Florian Westphal <[email protected]> | 2025-07-18 11:27:13 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2025-07-25 16:40:43 +0000 |
| commit | bf58e667af7d96c8eb9411f926a0a0955f41ce21 (patch) | |
| tree | 0903d4e002ffe8ed72d19e3301f3010d01b9dda6 /lib/crypto/mpi/mpicoder.c | |
| parent | netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (diff) | |
| download | kernel-bf58e667af7d96c8eb9411f926a0a0955f41ce21.tar.gz kernel-bf58e667af7d96c8eb9411f926a0a0955f41ce21.zip | |
netfilter: xt_nfacct: don't assume acct name is null-terminated
BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721
Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851
[..]
string+0x231/0x2b0 lib/vsprintf.c:721
vsnprintf+0x739/0xf00 lib/vsprintf.c:2874
[..]
nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41
xt_check_match+0x3d1/0xab0 net/netfilter/x_tables.c:523
nfnl_acct_find_get() handles non-null input, but the error
printk relied on its presence.
Reported-by: [email protected]
Closes: https://syzkaller.appspot.com/bug?extid=4ff165b9251e4d295690
Tested-by: [email protected]
Fixes: ceb98d03eac5 ("netfilter: xtables: add nfacct match to support extended accounting")
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'lib/crypto/mpi/mpicoder.c')
0 files changed, 0 insertions, 0 deletions