On Wed, Mar 09, 2016 at 12:04:21AM +0100, Florian Westphal wrote: > We copy accoring to ->target|matchsize, so check that the netlink attribute > (which can include padding and might be larger) contains enough data. > > Reported-by: Julia Lawall <Julia.Lawall@xxxxxxx> > Signed-off-by: Florian Westphal <fw@xxxxxxxxx> I think xt_check_match() and xt_check_target() already validate this for us. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
