Re: [PATCH nf] netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, May 05, 2019 at 06:47:33PM +0200, Florian Westphal wrote:
> If userspace provides a rule blob with trailing data after last target,
> we trigger a splat, then convert ruleset to 64bit format (with trailing
> data), then pass that to do_replace_finish() which then returns -EINVAL.
> 
> Erroring out right away avoids the splat plus unneeded translation and
> error unwind,

Applied, thanks Florian.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux