diff options
| author |   Chen Gang <gang.chen@asianux.com> | 2013-05-23 01:50:46 +0000 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2013-05-23 14:25:40 +0200 |
| commit | 4f36ea6eed2081340c7a7aa98c73187ecfccebff (patch) | |
| tree | 295b214d5b19811ae7ffe450402af412daf109c8 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6 (diff) | |
| download | linux-dev-4f36ea6eed2081340c7a7aa98c73187ecfccebff.tar.xz linux-dev-4f36ea6eed2081340c7a7aa98c73187ecfccebff.zip | |
netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path
If nf_log uses ipt_ULOG as logging output, we can deliver non-null
terminated strings to user-space since the maximum length of the
prefix that is passed by nf_log is NF_LOG_PREFIXLEN but pm->prefix
is 32 bytes long (ULOG_PREFIX_LEN).
This is actually happening already from nf_conntrack_tcp if ipt_ULOG
is used, since it is passing strings longer than 32 bytes.
Signed-off-by: Chen Gang <gang.chen@asianux.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions