Files
linux/net
Florian Westphal 6cb56218ad netfilter: xt_RATEEST: reject non-null terminated string from userspace
syzbot reports:
detected buffer overflow in strlen
[..]
Call Trace:
 strlen include/linux/string.h:325 [inline]
 strlcpy include/linux/string.h:348 [inline]
 xt_rateest_tg_checkentry+0x2a5/0x6b0 net/netfilter/xt_RATEEST.c:143

strlcpy assumes src is a c-string. Check info->name before its used.

Reported-by: syzbot+e86f7c428c8c50db65b4@syzkaller.appspotmail.com
Fixes: 5859034d7e ("[NETFILTER]: x_tables: add RATEEST target")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2020-12-27 11:52:26 +01:00
..
2020-10-30 11:43:42 -07:00
2020-10-30 11:34:09 -07:00
2020-12-17 10:24:47 -08:00
2020-11-17 15:22:06 -04:00
2020-11-23 17:44:11 -08:00
2020-10-29 19:27:45 +01:00
2020-10-29 19:27:45 +01:00