diff options
| author | David S. Miller <davem@davemloft.net> | 2015-04-28 05:12:34 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-04-28 05:12:34 +0200 |
| commit | 39376ccb1968ba9f83e2a880a8bf02ad5dea44e1 (patch) | |
| tree | 8f1299a1ac38bd64415482212a33510eb94b3f56 /net | |
| parent | bpf: fix 64-bit divide (diff) | |
| parent | netfilter: bridge: fix NULL deref in physin/out ifindex helpers (diff) | |
| download | linux-39376ccb1968ba9f83e2a880a8bf02ad5dea44e1.tar.xz linux-39376ccb1968ba9f83e2a880a8bf02ad5dea44e1.zip | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for your net tree,
they are:
1) Fix a crash in nf_tables when dictionaries are used from the ruleset,
due to memory corruption, from Florian Westphal.
2) Fix another crash in nf_queue when used with br_netfilter. Also from
Florian.
Both fixes are related to new stuff that got in 4.0-rc.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nf_tables_api.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 78af83bc9c8e..ad9d11fb29fd 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -4340,7 +4340,6 @@ static int nft_verdict_init(const struct nft_ctx *ctx, struct nft_data *data, case NFT_CONTINUE: case NFT_BREAK: case NFT_RETURN: - desc->len = sizeof(data->verdict); break; case NFT_JUMP: case NFT_GOTO: @@ -4355,10 +4354,10 @@ static int nft_verdict_init(const struct nft_ctx *ctx, struct nft_data *data, chain->use++; data->verdict.chain = chain; - desc->len = sizeof(data); break; } + desc->len = sizeof(data->verdict); desc->type = NFT_DATA_VERDICT; return 0; } |