Re: [PATCH net] netfilter: nf_ct_h323: restore boundary check correctness

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 25, 2019 at 11:46:50PM +0200, Jakub Jankowski wrote:
> Since commit bc7d811ace4a ("netfilter: nf_ct_h323: Convert
> CHECK_BOUND macro to function"), NAT traversal for H.323
> doesn't work, failing to parse H323-UserInformation.
> nf_h323_error_boundary() compares contents of the bitstring,
> not the addresses, preventing valid H.323 packets from being
> conntrack'd.
> 
> This looks like an oversight from when CHECK_BOUND macro was
> converted to a function.
> 
> To fix it, stop dereferencing bs->cur and bs->end.

Applied, thanks.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux