Commit a08e4e19 authored by Florian Westphal's avatar Florian Westphal Committed by Pablo Neira Ayuso
Browse files

netfilter: x_tables: assert minimum target size 



The target size includes the size of the xt_entry_target struct.

Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent aa412ba2

net/netfilter/x_tables.c

+3 −0
Original line number Diff line number Diff line
@@ -568,6 +568,9 @@ int xt_check_entry_offsets(const void *base, 
		return -EINVAL;



	t = (void *)(e + target_offset);

	if (t->u.target_size < sizeof(*t))

		return -EINVAL;



	if (target_offset + t->u.target_size > next_offset)

		return -EINVAL;