netfilter: x_tables: check for size overflow
authorFlorian Westphal <fw@strlen.de>
Thu, 10 Mar 2016 00:56:23 +0000 (01:56 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 17 Mar 2016 01:25:23 +0000 (01:25 +0000)
commit7ccc61d512797612eca27e9d1e1eb09259cdb7b6
tree7ec0d62ce7b382574b678f86059deb746570b723
parenta818f5544afe8f99790a55e1e6ed74f00cb51cfe
netfilter: x_tables: check for size overflow

Ben Hawkes says:
 integer overflow in xt_alloc_table_info, which on 32-bit systems can
 lead to small structure allocation and a copy_from_user based heap
 corruption.

Reported-by: Ben Hawkes <hawkes@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name netfilter-x_tables-check-for-size-overflow.patch
net/netfilter/x_tables.c