Re: [PATCH nft] owner: Fix potential array out of bounds access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Dec 21, 2022 at 05:37:46PM +0100, Pablo Neira Ayuso wrote:
> If the link target length exceeds 'sizeof(tmp)' bytes, readlink() will
> return 'sizeof(tmp)'. Using this value as index is illegal.
> 
> Original update from Phil, for the conntrack-tools tree, which also has
> a copy of this function.

For the record: If this code is generalized, this code is a candidate
for libmnl I think.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux