diff options
| author | Florian Westphal <[email protected]> | 2019-07-29 17:58:10 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2019-07-30 13:37:44 +0200 |
| commit | 3b48300d5cc7c7bed63fddb006c4046549ed4aec (patch) | |
| tree | 426465a2f608a3943e748821242f41c336928d56 /lib/mpi/mpi-cmp.c | |
| parent | 91826ba13855f73e252fef68369b3b0e1ed25253 (diff) | |
netfilter: ebtables: also count base chain policies
ebtables doesn't include the base chain policies in the rule count,
so we need to add them manually when we call into the x_tables core
to allocate space for the comapt offset table.
This lead syzbot to trigger:
WARNING: CPU: 1 PID: 9012 at net/netfilter/x_tables.c:649
xt_compat_add_offset.cold+0x11/0x36 net/netfilter/x_tables.c:649
Reported-by: [email protected]
Fixes: 2035f3ff8eaa ("netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are present")
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-cmp.c')
0 files changed, 0 insertions, 0 deletions