www.infradead.org Git - users/hch/uuid.git/commit

]> www.infradead.org Git - users/hch/uuid.git/commit

projects / users / hch / uuid.git / commit

author	Pablo Neira Ayuso <pablo@netfilter.org>
	Fri, 6 Dec 2019 21:09:14 +0000 (22:09 +0100)
committer	Pablo Neira Ayuso <pablo@netfilter.org>
	Mon, 9 Dec 2019 12:14:03 +0000 (13:14 +0100)
commit	0d2c96af797ba149e559c5875c0151384ab6dd14
tree	f7bdfa04d63e35348b2b8160841518207119975b	tree
parent	bffc124b6fe37d0ae9b428d104efb426403bb5c9	commit \| diff

netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()

Userspace might bogusly sent NFT_DATA_VERDICT in several netlink
attributes that assume NFT_DATA_VALUE. Moreover, make sure that error
path invokes nft_data_release() to decrement the reference count on the
chain object.

Fixes: 96518518cc41 ("netfilter: add nftables")
Fixes: 0f3cd9b36977 ("netfilter: nf_tables: add range expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

net/netfilter/nf_tables_api.c		diff \| blob \| history
net/netfilter/nft_bitwise.c		diff \| blob \| history
net/netfilter/nft_cmp.c		diff \| blob \| history
net/netfilter/nft_range.c		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom