diff options
| author |   Patrick McHardy <kaber@trash.net> | 2015-03-03 20:04:20 +0000 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2015-03-04 18:46:06 +0100 |
| commit | 86f1ec32318159a24de349f0a38e79b9d2b3131a (patch) | |
| tree | 6533fb1a3354201a635cf4dfdeaa143e2d3de12a /scripts/asn1_compiler.c | |
| parent | netfilter: nf_tables: check for overflow of rule dlen field (diff) | |
| download | wireguard-linux-86f1ec32318159a24de349f0a38e79b9d2b3131a.tar.xz wireguard-linux-86f1ec32318159a24de349f0a38e79b9d2b3131a.zip | |
netfilter: nf_tables: fix userdata length overflow
The NFT_USERDATA_MAXLEN is defined to 256, however we only have a u8
to store its size. Introduce a struct nft_userdata which contains a
length field and indicate its presence using a single bit in the rule.
The length field of struct nft_userdata is also a u8, however we don't
store zero sized data, so the actual length is udata->len + 1.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts/asn1_compiler.c')
0 files changed, 0 insertions, 0 deletions