Pablo Neira Ayuso f0d1f04f0a netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX ...

NFT_REJECT_ICMPX_MAX should be __NFT_REJECT_ICMPX_MAX - 1.

nft_reject_icmp_code() and nft_reject_icmpv6_code() are called from the
packet path, so BUG_ON in case we try to access an unknown abstracted
ICMP code. This should not happen since we already validate this from
nft_reject_{inet,bridge}_init().

Fixes: 51b0a5d ("netfilter: nft_reject: introduce icmp code abstraction for inet and bridge")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2014-10-07 20:16:31 +02:00

..

asm-generic

bpf: enable bpf syscall on x64 and i386

2014-09-26 15:05:14 -04:00

drm

drm/radeon: properly document reloc priority mask

2014-08-18 17:09:43 -04:00

linux

netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX

2014-10-07 20:16:31 +02:00

mtd

mtd: lpddr: add driver for LPDDR2-NVM PCM memories

2014-05-20 17:45:17 -07:00

rdma

Merge branches 'core', 'cxgb4', 'ipoib', 'iser', 'iwcm', 'mad', 'misc', 'mlx4', 'mlx5', 'ocrdma' and 'srp' into for-next

2014-08-14 08:58:04 -07:00

scsi

…

sound

ALSA: pcm: Introduce protocol version field to sw_params

2014-07-21 09:07:46 +02:00

video

…

xen

xen: install xen/gntdev.h and xen/gntalloc.h

2014-02-11 10:12:36 -05:00

Kbuild

…