Pablo Neira Ayuso c39ba4de6b netfilter: nf_tables: replace BUG_ON by element length check ...

BUG_ON can be triggered from userspace with an element with a large
userdata area. Replace it by length check and return EINVAL instead.
Over time extensions have been growing in size.

Pick a sufficiently old Fixes: tag to propagate this fix.

Fixes: 7d7402642e ("netfilter: nf_tables: variable sized set element keys / data")
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2022-07-09 16:25:09 +02:00

..

ipv4

…

ipv6

…

br_netfilter.h

…

nf_conntrack_acct.h

…

nf_conntrack_act_ct.h

…

nf_conntrack_bpf.h

…

nf_conntrack_bridge.h

…

nf_conntrack_core.h

netfilter: conntrack: re-fetch conntrack after insertion

2022-05-27 11:16:34 +02:00

nf_conntrack_count.h

netfilter: nf_conncount: reduce unnecessary GC

2022-05-16 13:05:40 +02:00

nf_conntrack_ecache.h

netfilter: prefer extension check to pointer check

2022-05-13 18:56:28 +02:00

nf_conntrack_expect.h

…

nf_conntrack_extend.h

netfilter: extensions: introduce extension genid count

2022-05-13 18:52:16 +02:00

nf_conntrack_helper.h

netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()

2022-03-20 00:29:35 +01:00

nf_conntrack_l4proto.h

…

nf_conntrack_labels.h

netfilter: extensions: introduce extension genid count

2022-05-13 18:52:16 +02:00

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

netfilter: cttimeout: decouple unlink and free on netns destruction

2022-05-13 18:52:16 +02:00

nf_conntrack_timestamp.h

…

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()

2022-05-13 18:56:27 +02:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: flowtable: Fix QinQ and pppoe support for inet table

2022-03-16 11:25:04 +01:00

nf_hooks_lwtunnel.h

…

nf_log.h

…

nf_nat_helper.h

…

nf_nat_masquerade.h

…

nf_nat_redirect.h

…

nf_nat.h

…

nf_queue.h

netfilter: nf_queue: fix possible use-after-free

2022-03-01 11:50:35 +01:00

nf_reject.h

netfilter: conntrack: skip verification of zero UDP checksum

2022-05-13 18:56:28 +02:00

nf_socket.h

…

nf_synproxy.h

…

nf_tables_core.h

…

nf_tables_ipv4.h

…

nf_tables_ipv6.h

…

nf_tables_offload.h

netfilter: nf_tables: bail out early if hardware offload is not supported

2022-06-06 19:19:15 +02:00

nf_tables.h

netfilter: nf_tables: replace BUG_ON by element length check

2022-07-09 16:25:09 +02:00

nf_tproxy.h

…

nft_fib.h

netfilter: nft_fib: add reduce support

2022-03-20 00:29:47 +01:00

nft_meta.h

netfilter: nft_meta: extend reduce support to bridge family

2022-03-20 00:29:46 +01:00

nft_reject.h

…

xt_rateest.h

…