diff options
| author | Florian Westphal <fw@strlen.de> | 2019-07-29 17:58:10 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-07-30 13:37:44 +0200 |
| commit | 3b48300d5cc7c7bed63fddb006c4046549ed4aec (patch) | |
| tree | 426465a2f608a3943e748821242f41c336928d56 /tools/gpio | |
| parent | netfilter: add include guard to xt_connlabel.h (diff) | |
| download | linux-3b48300d5cc7c7bed63fddb006c4046549ed4aec.tar.xz linux-3b48300d5cc7c7bed63fddb006c4046549ed4aec.zip | |
netfilter: ebtables: also count base chain policies
ebtables doesn't include the base chain policies in the rule count,
so we need to add them manually when we call into the x_tables core
to allocate space for the comapt offset table.
This lead syzbot to trigger:
WARNING: CPU: 1 PID: 9012 at net/netfilter/x_tables.c:649
xt_compat_add_offset.cold+0x11/0x36 net/netfilter/x_tables.c:649
Reported-by: syzbot+276ddebab3382bbf72db@syzkaller.appspotmail.com
Fixes: 2035f3ff8eaa ("netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are present")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/gpio')
0 files changed, 0 insertions, 0 deletions