diff options
| author | Pablo Neira Ayuso <[email protected]> | 2022-07-05 09:41:59 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2022-07-09 14:25:09 +0000 |
| commit | c39ba4de6b0a843bec5d46c2b6f2064428dada5e (patch) | |
| tree | 9573c622675b31bbb723ca6d302c557578557d25 /net/lapb/lapb_out.c | |
| parent | netfilter: nf_log: incorrect offset to network header (diff) | |
| download | kernel-c39ba4de6b0a843bec5d46c2b6f2064428dada5e.tar.gz kernel-c39ba4de6b0a843bec5d46c2b6f2064428dada5e.zip | |
netfilter: nf_tables: replace BUG_ON by element length check
BUG_ON can be triggered from userspace with an element with a large
userdata area. Replace it by length check and return EINVAL instead.
Over time extensions have been growing in size.
Pick a sufficiently old Fixes: tag to propagate this fix.
Fixes: 7d7402642eaf ("netfilter: nf_tables: variable sized set element keys / data")
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions