Mathias Krause 442a395f70 netfilter: ipt_ULOG: fix info leaks ...

commit 278f2b3e2a upstream.

The ulog messages leak heap bytes by the means of padding bytes and
incompletely filled string arrays. Fix those by memset(0)'ing the
whole struct before filling it.

Signed-off-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>

2014-07-02 12:06:43 +02:00

..

arp_tables.c

netfilter: Can't fail and free after table replacement

2014-05-29 11:38:09 +02:00

arpt_mangle.c

netfilter: arpt_mangle: fix return values of checkentry

2011-02-01 16:03:46 +01:00

arptable_filter.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

ip_tables.c

netfilter: Can't fail and free after table replacement

2014-05-29 11:38:09 +02:00

ipt_ah.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ipt_CLUSTERIP.c

proc: Supply a function to remove a proc entry by PDE

2013-05-01 17:29:46 -04:00

ipt_ECN.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ipt_MASQUERADE.c

netfilter: nf_conntrack: don't send destroy events from iterator

2013-08-09 12:03:33 +02:00

ipt_REJECT.c

netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged

2013-08-28 00:13:12 +02:00

ipt_rpfilter.c

netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too

2013-04-19 00:11:59 +02:00

ipt_SYNPROXY.c

netfilter: synproxy: fix BUG_ON triggered by corrupt TCP packets

2013-09-30 12:44:38 +02:00

ipt_ULOG.c

netfilter: ipt_ULOG: fix info leaks

2014-07-02 12:06:43 +02:00

iptable_filter.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

iptable_mangle.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

iptable_nat.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

iptable_raw.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

iptable_security.c

PTR_RET is now PTR_ERR_OR_ZERO(): Replace most.

2013-07-15 11:25:01 +09:30

Kconfig

netfilter: add SYNPROXY core/target

2013-08-28 00:27:54 +02:00

Makefile

netfilter: add SYNPROXY core/target

2013-08-28 00:27:54 +02:00

nf_conntrack_l3proto_ipv4_compat.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00

nf_conntrack_l3proto_ipv4.c

netfilter: nf_conntrack: make sequence number adjustments usuable without NAT

2013-08-28 00:26:48 +02:00

nf_conntrack_proto_icmp.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00

nf_defrag_ipv4.c

netfilter: ipv4: defrag: set local_df flag on defragmented skb

2014-06-11 09:07:27 +02:00

nf_nat_h323.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00

nf_nat_l3proto_ipv4.c

netfilter: add protocol independent NAT core

2012-08-30 03:00:14 +02:00

nf_nat_pptp.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00

nf_nat_proto_gre.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00

nf_nat_proto_icmp.c

netfilter: add protocol independent NAT core

2012-08-30 03:00:14 +02:00

nf_nat_snmp_basic.c

netfilter: add my copyright statements

2013-04-18 20:27:55 +02:00