diff options
| author | Pablo Neira Ayuso <[email protected]> | 2024-10-30 22:13:48 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2024-10-31 09:54:49 +0000 |
| commit | d5953d680f7e96208c29ce4139a0e38de87a57fe (patch) | |
| tree | c3e9ec33ebe8be0458955dd11d414d2bb129f1f8 /tools/perf/util/python.c | |
| parent | netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (diff) | |
| download | kernel-d5953d680f7e96208c29ce4139a0e38de87a57fe.tar.gz kernel-d5953d680f7e96208c29ce4139a0e38de87a57fe.zip | |
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
If access to offset + length is larger than the skbuff length, then
skb_checksum() triggers BUG_ON().
skb_checksum() internally subtracts the length parameter while iterating
over skbuff, BUG_ON(len) at the end of it checks that the expected
length to be included in the checksum calculation is fully consumed.
Fixes: 7ec3f7b47b8d ("netfilter: nft_payload: add packet mangling support")
Reported-by: Slavin Liu <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'tools/perf/util/python.c')
0 files changed, 0 insertions, 0 deletions