[PATCH nf 0/2] netfilter: nf_tables: fix nf_trace related crash

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



The commit e34b9ed96ce3 ("netfilter: nf_tables: avoid skb access on nf_stolen")
is broken, it adds read-access to a structure that might contain
garbage.

Fix this and extend the existing nft_trans_stress.sh script to
cover this.

Florian Westphal (2):
  netfilter: nf_tables: fix crash when nf_trace is enabled
  selftests: netfilter: add test case for nf trace infrastructure

 net/netfilter/nf_tables_core.c                | 21 +++--
 .../selftests/netfilter/nft_trans_stress.sh   | 78 ++++++++++++++++++-
 2 files changed, 86 insertions(+), 13 deletions(-)
-- 
2.35.1




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux