On Tue, May 16, 2017 at 10:24:00AM +0200, Pablo Neira Ayuso wrote: > On Tue, May 16, 2017 at 09:30:18AM +0800, gfree.wind@xxxxxxxxxxx wrote: > > From: Gao Feng <gfree.wind@xxxxxxxxxxx> > > > > The info->target is from userspace and it would be used directly. > > So we need to add the sanity check to make sure it is a valid standard > > target, although the ebtables tool has already checked it. Kernel need > > to check anything from userspace. > > > > If the target was set as an evil value, it would break the ebtables > > and cause a panic. Because the non-standard target is treated as one > > offset. > > > > Now add one helper function ebt_invalid_target, and we would replace > > the macro INVALID_TARGET later. > > Applied, thanks. > > There is a few bunch of spots that can use this indeed. Follow up with > a patch for nf-next once merge window opens up. Please, use: netfilter: ... as you initial patch subject next time... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
