netfilter: ipset: use bitmap infrastructure completely
commit 32c72165dbd0e246e69d16a3ad348a4851afd415 upstream. The bitmap allocation did not use full unsigned long sizes when calculating the required size and that was triggered by KASAN as slab-out-of-bounds read in several places. The patch fixes all of them. Reported-by:<syzbot+fabca5cbf5e54f3fe2de@syzkaller.appspotmail.com> Reported-by:
<syzbot+827ced406c9a1d9570ed@syzkaller.appspotmail.com> Reported-by:
<syzbot+190d63957b22ef673ea5@syzkaller.appspotmail.com> Reported-by:
<syzbot+dfccdb2bdb4a12ad425e@syzkaller.appspotmail.com> Reported-by:
<syzbot+df0d0f5895ef1f41a65b@syzkaller.appspotmail.com> Reported-by:
<syzbot+b08bd19bb37513357fd4@syzkaller.appspotmail.com> Reported-by:
<syzbot+53cdd0ec0bbabd53370a@syzkaller.appspotmail.com> Signed-off-by:
Jozsef Kadlecsik <kadlec@netfilter.org> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Loading
Please register or sign in to comment