diff options
| author | Eric Dumazet <edumazet@google.com> | 2015-02-15 19:03:45 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2015-03-26 15:06:59 +0100 |
| commit | 2e1a691e057140b6b559e885b2876581dc249489 (patch) | |
| tree | a234e97b3718659b0a4a4cc62aecaa8351d255bf /arch/arm64/mm/dma-mapping.c | |
| parent | 17ad69a74cea38b94148cb7449d9a6c682d04444 (diff) | |
netfilter: xt_socket: fix a stack corruption bug
commit 78296c97ca1fd3b104f12e1f1fbc06c46635990b upstream.
As soon as extract_icmp6_fields() returns, its local storage (automatic
variables) is deallocated and can be overwritten.
Lets add an additional parameter to make sure storage is valid long
enough.
While we are at it, adds some const qualifiers.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Fixes: b64c9256a9b76 ("tproxy: added IPv6 support to the socket match")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'arch/arm64/mm/dma-mapping.c')
0 files changed, 0 insertions, 0 deletions