Files
linux/include/net
Máté Eckl 5711b4e893 netfilter: nf_tproxy: fix possible non-linear access to transport header
This patch fixes a silent out-of-bound read possibility that was present
because of the misuse of this function.

Mostly it was called with a struct udphdr *hp which had only the udphdr
part linearized by the skb_header_pointer, however
nf_tproxy_get_sock_v{4,6} uses it as a tcphdr pointer, so some reads for
tcp specific attributes may be invalid.

Fixes: a583636a83 ("inet: refactor inet[6]_lookup functions to take skb")
Signed-off-by: Máté Eckl <ecklm94@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2018-07-06 14:32:44 +02:00
..
2017-07-11 06:08:58 -04:00
2018-01-19 14:02:12 -05:00
2017-04-05 10:15:20 +02:00
2018-03-23 21:52:19 -04:00
2018-05-16 07:23:35 +02:00
2018-05-26 09:16:44 +02:00
2018-05-24 14:22:59 -07:00
2018-05-11 12:03:06 -04:00
2018-02-28 11:43:28 -05:00
2018-04-23 10:21:24 -04:00
2017-10-11 09:49:34 +02:00
2017-11-16 10:49:00 +09:00
2017-12-11 14:10:06 -05:00
2018-04-26 15:08:04 -04:00
2017-12-15 12:34:00 -05:00
2018-04-07 22:32:31 -04:00
2017-11-08 16:12:33 +09:00
2018-06-27 10:46:43 +09:00
2018-05-16 07:23:35 +02:00
2017-12-05 14:37:13 -05:00
2018-05-16 07:23:35 +02:00
2018-05-31 22:48:46 -04:00
2018-04-17 13:53:13 -04:00
2018-06-05 15:46:26 +02:00