diff options
| author | Pablo Neira Ayuso <[email protected]> | 2025-01-28 11:26:33 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2025-01-30 11:26:11 +0000 |
| commit | 1b9335a8000fb70742f7db10af314104b6ace220 (patch) | |
| tree | f247f87b71ca09d41069f9c14bc0c5672da2a827 /net/core/page_pool.c | |
| parent | selftests: net: Adapt ethtool mq tests to fix in qdisc graft (diff) | |
| download | kernel-1b9335a8000fb70742f7db10af314104b6ace220.tar.gz kernel-1b9335a8000fb70742f7db10af314104b6ace220.zip | |
netfilter: nf_tables: reject mismatching sum of field_len with set key length
The field length description provides the length of each separated key
field in the concatenation, each field gets rounded up to 32-bits to
calculate the pipapo rule width from pipapo_init(). The set key length
provides the total size of the key aligned to 32-bits.
Register-based arithmetics still allows for combining mismatching set
key length and field length description, eg. set key length 10 and field
description [ 5, 4 ] leading to pipapo width of 12.
Cc: [email protected]
Fixes: 3ce67e3793f4 ("netfilter: nf_tables: do not allow mismatch field size and set key length")
Reported-by: Noam Rathaus <[email protected]>
Reviewed-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'net/core/page_pool.c')
0 files changed, 0 insertions, 0 deletions