Commit dd9d27d8 authored 9 years ago by Florian Westphal Committed by Mekala Natarajan 8 years ago

UPSTREAM: netfilter: x_tables: make sure e->next_offset covers remaining blob size


Otherwise this function may read data beyond the ruleset blob.

Bug: 29637687
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
(cherry picked from commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91)

Change-Id: I8e5e01af575991c4648633f64a1142915a6a12aa

parent 57b822aa

Branches