diff options
| author | Gustavo A. R. Silva <gustavo@embeddedor.com> | 2018-03-12 19:21:38 -0500 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-03-20 13:41:38 +0100 |
| commit | 1446385904add0e89f990ee0518434365e50ce86 (patch) | |
| tree | 109422533e9bed9f96aff480f543745ddd51f180 /lib/mpi/mpiutil.c | |
| parent | 8039ab43eeac029a9c47c0411918ea82c9ce87cd (diff) | |
netfilter: nfnetlink_cthelper: Remove VLA usage
In preparation to enabling -Wvla, remove VLA and replace it
with dynamic memory allocation.
>From a security viewpoint, the use of Variable Length Arrays can be
a vector for stack overflow attacks. Also, in general, as the code
evolves it is easy to lose track of how big a VLA can get. Thus, we
can end up having segfaults that are hard to debug.
Also, fixed as part of the directive to remove all VLAs from
the kernel: https://lkml.org/lkml/2018/3/7/621
Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'lib/mpi/mpiutil.c')
0 files changed, 0 insertions, 0 deletions
