Re: Raw Payload Expressions - out of bounds write?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Please elaborate as what is wrong here in listing 3.

Within the second line of the rule (@ih,80,16 set @ih,80,16 & 0x3f0 \)

The mask 0x3f0 equates to 1,008 in decimal.
(3 * 16**2) + (15 * 16**1) + (0 * 16^0) = 1,008
Here '**' indicates exponent.

1,008 is far larger than the 34 bit range that I covered.
I understand that within NetFilter, there may be safeguards that which prevent writing beyond array bounds; but, that section of the rule still covers the bits that I did not wish to zero.

Apologies, but I have not checked the code as of yet.

sunny





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux