Florian Westphal 909021aed8 netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule ...

[ Upstream commit 680f6af533 ]

If userspace provides a rule blob with trailing data after last target,
we trigger a splat, then convert ruleset to 64bit format (with trailing
data), then pass that to do_replace_finish() which then returns -EINVAL.

Erroring out right away avoids the splat plus unneeded translation and
error unwind.

Fixes: 81e675c227 ("netfilter: ebtables: add CONFIG_COMPAT support")
Reported-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:50:47 +01:00

..

ebt_802_3.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_among.c

netfilter: bridge: ebt_among: add more missing match size checks

2018-03-11 21:24:49 +01:00

ebt_arp.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_arpreply.c

ebtables: arpreply: Add the standard target sanity check

2017-05-16 10:24:27 +02:00

ebt_dnat.c

bridge: ebtables: don't crash when using dnat target in output chains

2019-12-05 09:19:41 +01:00

ebt_ip6.c

netfilter: ebtables: fix indent on if statements

2017-08-24 18:56:17 +02:00

ebt_ip.c

netfilter: ebtables: add support for matching IGMP type

2018-03-20 17:24:10 +01:00

ebt_limit.c

netfilter: bridge: use pr ratelimiting

2018-02-14 21:05:36 +01:00

ebt_log.c

netfilter: Use pr_cont where appropriate

2017-03-06 18:00:48 +01:00

ebt_mark_m.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_mark.c

netfilter: ebt: Use new helper ebt_invalid_target to check target

2017-06-19 19:09:19 +02:00

ebt_nflog.c

netfilter: ebt_nflog: fix unexpected truncated packet

2017-06-29 18:47:02 +02:00

ebt_pkttype.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_redirect.c

netfilter: ebt: Use new helper ebt_invalid_target to check target

2017-06-19 19:09:19 +02:00

ebt_snat.c

netfilter: ebt: Use new helper ebt_invalid_target to check target

2017-06-19 19:09:19 +02:00

ebt_stp.c

netfilter: bridge: stp fix reference to uninitialized data

2018-05-08 14:08:12 +02:00

ebt_vlan.c

netfilter-bridge: use netdev style comments

2015-11-23 17:54:39 +01:00

ebtable_broute.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

ebtable_filter.c

netfilter: bridge: Expose nf_tables bridge hook priorities through uapi

2018-08-03 21:15:09 +02:00

ebtable_nat.c

netfilter: bridge: Expose nf_tables bridge hook priorities through uapi

2018-08-03 21:15:09 +02:00

ebtables.c

netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule

2020-01-27 14:50:47 +01:00

Kconfig

netfilter: merge meta_bridge into nft_meta

2018-04-24 10:29:22 +02:00

Makefile

netfilter: merge meta_bridge into nft_meta

2018-04-24 10:29:22 +02:00

nf_log_bridge.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

nft_reject_bridge.c

net: Fix usage of pskb_trim_rcsum

2019-01-31 08:14:31 +01:00