diff options
| author | David Leadbeater <dgl@dgl.cx> | 2022-08-26 14:56:57 +1000 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2022-09-07 15:55:23 +0200 |
| commit | e8d5dfd1d8747b56077d02664a8838c71ced948e (patch) | |
| tree | 336ad75fbf4928828a1d2c8be6413e00226e076e /lib/mpi/mpi-sub-ui.c | |
| parent | 25b327d4f818b9d41265ea3eea26d805216589b8 (diff) | |
netfilter: nf_conntrack_irc: Tighten matching on DCC message
CTCP messages should only be at the start of an IRC message, not
anywhere within it.
While the helper only decodes packes in the ORIGINAL direction, its
possible to make a client send a CTCP message back by empedding one into
a PING request. As-is, thats enough to make the helper believe that it
saw a CTCP message.
Fixes: 869f37d8e48f ("[NETFILTER]: nf_conntrack/nf_nat: add IRC helper port")
Signed-off-by: David Leadbeater <dgl@dgl.cx>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'lib/mpi/mpi-sub-ui.c')
0 files changed, 0 insertions, 0 deletions