diff options
| author | David S. Miller <davem@davemloft.net> | 2022-07-03 12:29:18 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2022-07-03 12:29:18 +0100 |
| commit | 280e3a857d96f9ca8e24632788e1e7a0fec4e9f7 (patch) | |
| tree | a482ac1ba8b798e1ba26d39738aa7c64ba60eaca /net/netfilter/nf_conntrack_netlink.c | |
| parent | 3d5a2a396f19874b02196268a567a529ad5c7448 (diff) | |
| parent | 9827a0e6e23bf43003cd3d5b7fb11baf59a35e1e (diff) | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for net:
1) Insufficient validation of element datatype and length in
nft_setelem_parse_data(). At least commit 7d7402642eaf updates
maximum element data area up to 64 bytes when only 16 bytes
where supported at the time. Support for larger element size
came later in fdb9c405e35b though. Picking this older commit
as Fixes: tag to be safe than sorry.
2) Memleak in pipapo destroy path, reproducible when transaction
in aborted. This is already triggering in the existing netfilter
test infrastructure since more recent new tests are covering this
path.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter/nf_conntrack_netlink.c')
0 files changed, 0 insertions, 0 deletions