projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fa80360) | patch
netfilter: nf_tables: missing sanitization in data from userspace
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 May 2017 10:17:29 +0000 (11:17 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 May 2017 10:51:40 +0000 (12:51 +0200)
commit71df14b0ce094be46d105b5a3ededd83b8e779a0
treeb0d32758237566a91e43001780641c7a6971d2dctree | snapshot
parentfa803605eef39372e53d7813002d73a3fcf10c88commit | diff
netfilter: nf_tables: missing sanitization in data from userspace

Do not assume userspace always sends us NFT_DATA_VALUE for bitwise and
cmp expressions. Although NFT_DATA_VERDICT does not make any sense, it
is still possible to handcraft a netlink message using this incorrect
data type.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_bitwise.c diff | blob | history
net/netfilter/nft_cmp.c diff | blob | history
John Crispins staging tree