diff options
| author | Pablo Neira Ayuso <[email protected]> | 2020-01-21 15:07:00 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2020-01-24 19:54:28 +0000 |
| commit | 826035498ec14b77b62a44f0cb6b94d45530db6f (patch) | |
| tree | 22dcb670215ae5c943d1fcd2ba8780bb1dbca885 /net/core/utils.c | |
| parent | netfilter: nf_tables_offload: fix check the chain offload flag (diff) | |
| download | kernel-826035498ec14b77b62a44f0cb6b94d45530db6f.tar.gz kernel-826035498ec14b77b62a44f0cb6b94d45530db6f.zip | |
netfilter: nf_tables: add __nft_chain_type_get()
This new helper function validates that unknown family and chain type
coming from userspace do not trigger an out-of-bound array access. Bail
out in case __nft_chain_type_get() returns NULL from
nft_chain_parse_hook().
Fixes: 9370761c56b6 ("netfilter: nf_tables: convert built-in tables/chains to chain types")
Reported-by: [email protected]
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'net/core/utils.c')
0 files changed, 0 insertions, 0 deletions