diff options
| author | Liping Zhang <[email protected]> | 2016-10-11 21:03:45 +0800 |
|---|---|---|
| committer | Pablo Neira Ayuso <[email protected]> | 2016-10-17 17:38:19 +0200 |
| commit | 6d19375b58763fefc2f215fb45117d3353ced888 (patch) | |
| tree | d95306abba2a48574b5db719455f92f79d18b2f1 /net/unix/sysctl_net_unix.c | |
| parent | 4f76de5f237615643d2243582cee331815312ad0 (diff) | |
netfilter: xt_NFLOG: fix unexpected truncated packet
Justin and Chris spotted that iptables NFLOG target was broken when they
upgraded the kernel to 4.8: "ulogd-2.0.5- IPs are no longer logged" or
"results in segfaults in ulogd-2.0.5".
Because "struct nf_loginfo li;" is a local variable, and flags will be
filled with garbage value, not inited to zero. So if it contains 0x1,
packets will not be logged to the userspace anymore.
Fixes: 7643507fe8b5 ("netfilter: xt_NFLOG: nflog-range does not truncate packets")
Reported-by: Justin Piszcz <[email protected]>
Reported-by: Chris Caputo <[email protected]>
Tested-by: Chris Caputo <[email protected]>
Signed-off-by: Liping Zhang <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Diffstat (limited to 'net/unix/sysctl_net_unix.c')
0 files changed, 0 insertions, 0 deletions