-
- Downloads
netfilter: ipset: fix hash size checking in kernel
The hash size must fit both into u32 (jhash) and the max value of size_t. The missing checking could lead to kernel crash, bug reported by Seblu. Signed-off-by:Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- include/linux/netfilter/ipset/ip_set_ahash.h 16 additions, 0 deletionsinclude/linux/netfilter/ipset/ip_set_ahash.h
- net/netfilter/ipset/ip_set_hash_ip.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_ip.c
- net/netfilter/ipset/ip_set_hash_ipport.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_ipport.c
- net/netfilter/ipset/ip_set_hash_ipportip.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_ipportip.c
- net/netfilter/ipset/ip_set_hash_ipportnet.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_ipportnet.c
- net/netfilter/ipset/ip_set_hash_net.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_net.c
- net/netfilter/ipset/ip_set_hash_netiface.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_netiface.c
- net/netfilter/ipset/ip_set_hash_netport.c 7 additions, 3 deletionsnet/netfilter/ipset/ip_set_hash_netport.c
Loading
Please register or sign in to comment