diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-01-21 18:07:00 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-01-29 18:45:33 +0300 |
| commit | 07ac418120aed1d8bb98f36b9bc17460ce37a036 (patch) | |
| tree | a98f8f5c4722aeef6362db34c80652f10a078987 /include | |
| parent | ea52197c9c4b9e1722e4ec0b798e1ab3744dd5a2 (diff) | |
| download | linux-07ac418120aed1d8bb98f36b9bc17460ce37a036.tar.xz | |
netfilter: nf_tables: add __nft_chain_type_get()
commit 826035498ec14b77b62a44f0cb6b94d45530db6f upstream.
This new helper function validates that unknown family and chain type
coming from userspace do not trigger an out-of-bound array access. Bail
out in case __nft_chain_type_get() returns NULL from
nft_chain_parse_hook().
Fixes: 9370761c56b6 ("netfilter: nf_tables: convert built-in tables/chains to chain types")
Reported-by: syzbot+156a04714799b1d480bc@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions