Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 823f05d7 authored by Dmitry Vyukov's avatar Dmitry Vyukov Committed by Hridya Valsaraju
Browse files

UPSTREAM: netfilter: x_tables: fix pointer leaks to userspace



Several netfilter matches and targets put kernel pointers into
info objects, but don't set usersize in descriptors.
This leads to kernel pointer leaks if a match/target is set
and then read back to userspace.

Properly set usersize for these matches/targets.

Found with manual code inspection.

Bug: 187527909
Fixes: ec2318904965 ("xtables: extend matches and targets with .usersize")
Signed-off-by: default avatarDmitry Vyukov <dvyukov@google.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Change-Id: If4d4beb7429c38d9b359cb2a929c71aef84f6cd0
(cherry picked from commit 1e98ffea5a8935ec040ab72299e349cb44b8defd)
Signed-off-by: default avatarHridya Valsaraju <hridya@google.com>
parent 86cb7720
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment