diff options
| author | David S. Miller <davem@davemloft.net> | 2021-06-10 14:26:18 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2021-06-10 14:26:18 -0700 |
| commit | 0280f429dc21d7b8196c401990eab6abe630006f (patch) | |
| tree | 747752d7c9d0866bd600032a7e6fcadf4b403215 /net/netfilter/nf_tables_api.c | |
| parent | d1b5bee4c8be01585033be9b3a8878789285285f (diff) | |
| parent | ba91c49dedbde758ba0b72f57ac90b06ddf8e548 (diff) | |
Merge branch 'tcp-options-oob-fixes'
Maxim Mikityanskiy says:
====================
Fix out of bounds when parsing TCP options
This series fixes out-of-bounds access in various places in the kernel
where parsing of TCP options takes place. Fortunately, many more
occurrences don't have this bug.
v2 changes:
synproxy: Added an early return when length < 0 to avoid calling
skb_header_pointer with negative length.
sch_cake: Added doff validation to avoid parsing garbage.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter/nf_tables_api.c')
0 files changed, 0 insertions, 0 deletions