diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-01-28 12:26:33 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-02-08 09:58:12 +0100 |
| commit | 49b7182b97bafbd5645414aff054b4a65d05823d (patch) | |
| tree | 629f35d76f8a3e906c4af5cfc007239f53ace5ed /scripts/stackusage | |
| parent | 4cea10a863f922a16fc003b1f63e197c30476714 (diff) | |
| download | linux-49b7182b97bafbd5645414aff054b4a65d05823d.tar.gz linux-49b7182b97bafbd5645414aff054b4a65d05823d.tar.bz2 linux-49b7182b97bafbd5645414aff054b4a65d05823d.zip | |
netfilter: nf_tables: reject mismatching sum of field_len with set key length
commit 1b9335a8000fb70742f7db10af314104b6ace220 upstream.
The field length description provides the length of each separated key
field in the concatenation, each field gets rounded up to 32-bits to
calculate the pipapo rule width from pipapo_init(). The set key length
provides the total size of the key aligned to 32-bits.
Register-based arithmetics still allows for combining mismatching set
key length and field length description, eg. set key length 10 and field
description [ 5, 4 ] leading to pipapo width of 12.
Cc: stable@vger.kernel.org
Fixes: 3ce67e3793f4 ("netfilter: nf_tables: do not allow mismatch field size and set key length")
Reported-by: Noam Rathaus <noamr@ssd-disclosure.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'scripts/stackusage')
0 files changed, 0 insertions, 0 deletions