diff options
| author | Dmitry Vyukov <dvyukov@google.com> | 2018-01-29 13:21:20 +0100 |
|---|---|---|
| committer | Hridya Valsaraju <hridya@google.com> | 2021-08-18 14:19:32 -0700 |
| commit | 0c5dfd3c4c5c30d37226f71bfa870520cea4855a (patch) | |
| tree | 69500a16aa62539ec630d4bcf6aaac7a5c1a41a3 /scripts/gen_compile_commands.py | |
| parent | 77e0acef0c1ee450a6925c70473cb64381c800f0 (diff) | |
UPSTREAM: netfilter: x_tables: fix pointer leaks to userspace
Several netfilter matches and targets put kernel pointers into
info objects, but don't set usersize in descriptors.
This leads to kernel pointer leaks if a match/target is set
and then read back to userspace.
Properly set usersize for these matches/targets.
Found with manual code inspection.
Bug: 120612905
Fixes: ec2318904965 ("xtables: extend matches and targets with .usersize")
Signed-off-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Hridya Valsaraju <hridya@google.com>
(cherry picked from commit 1e98ffea5a8935ec040ab72299e349cb44b8defd)
Change-Id: I49071d0d767e692480760442c2fa567e462b4103
Diffstat (limited to 'scripts/gen_compile_commands.py')
0 files changed, 0 insertions, 0 deletions