Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 84ec95b0 authored by David S. Miller's avatar David S. Miller
Browse files

Merge branch 'master' of git://1984.lsi.us.es/nf 



Pablo Neira Ayuso says:

====================
The following patchset contains two Netfilter fixes:

* Fix buffer overflow in the name of the timeout policy object
  in the cttimeout infrastructure, from Florian Westphal.

* Fix a bug in the hash set in case that IP ranges are
  specified, from Jozsef Kadlecsik.
====================

Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parents 5e7873d1 e93b5f9f

net/netfilter/ipset/ip_set_hash_ip.c

+2 −2
Original line number Diff line number Diff line
@@ -173,6 +173,7 @@ hash_ip4_uadt(struct ip_set *set, struct nlattr *tb[], 
		return adtfn(set, &nip, timeout, flags);

	}



	ip_to = ip;

	if (tb[IPSET_ATTR_IP_TO]) {

		ret = ip_set_get_hostipaddr4(tb[IPSET_ATTR_IP_TO], &ip_to);

		if (ret)
@@ -185,8 +186,7 @@ hash_ip4_uadt(struct ip_set *set, struct nlattr *tb[], 
		if (!cidr || cidr > 32)

			return -IPSET_ERR_INVALID_CIDR;

		ip_set_mask_from_to(ip, ip_to, cidr);

	} else

		ip_to = ip;

	}



	hosts = h->netmask == 32 ? 1 : 2 << (32 - h->netmask - 1);

net/netfilter/ipset/ip_set_hash_ipport.c

+3 −4
Original line number Diff line number Diff line
@@ -162,7 +162,7 @@ hash_ipport4_uadt(struct ip_set *set, struct nlattr *tb[], 
	const struct ip_set_hash *h = set->data;

	ipset_adtfn adtfn = set->variant->adt[adt];

	struct hash_ipport4_elem data = { };

	u32 ip, ip_to = 0, p = 0, port, port_to;

	u32 ip, ip_to, p = 0, port, port_to;

	u32 timeout = h->timeout;

	bool with_ports = false;

	int ret;
@@ -210,7 +210,7 @@ hash_ipport4_uadt(struct ip_set *set, struct nlattr *tb[], 
		return ip_set_eexist(ret, flags) ? 0 : ret;

	}



	ip = ntohl(data.ip);

	ip_to = ip = ntohl(data.ip);

	if (tb[IPSET_ATTR_IP_TO]) {

		ret = ip_set_get_hostipaddr4(tb[IPSET_ATTR_IP_TO], &ip_to);

		if (ret)
@@ -223,8 +223,7 @@ hash_ipport4_uadt(struct ip_set *set, struct nlattr *tb[], 
		if (!cidr || cidr > 32)

			return -IPSET_ERR_INVALID_CIDR;

		ip_set_mask_from_to(ip, ip_to, cidr);

	} else

		ip_to = ip;

	}



	port_to = port = ntohs(data.port);

	if (with_ports && tb[IPSET_ATTR_PORT_TO]) {

net/netfilter/ipset/ip_set_hash_ipportip.c

+3 −4
Original line number Diff line number Diff line
@@ -166,7 +166,7 @@ hash_ipportip4_uadt(struct ip_set *set, struct nlattr *tb[], 
	const struct ip_set_hash *h = set->data;

	ipset_adtfn adtfn = set->variant->adt[adt];

	struct hash_ipportip4_elem data = { };

	u32 ip, ip_to = 0, p = 0, port, port_to;

	u32 ip, ip_to, p = 0, port, port_to;

	u32 timeout = h->timeout;

	bool with_ports = false;

	int ret;
@@ -218,7 +218,7 @@ hash_ipportip4_uadt(struct ip_set *set, struct nlattr *tb[], 
		return ip_set_eexist(ret, flags) ? 0 : ret;

	}



	ip = ntohl(data.ip);

	ip_to = ip = ntohl(data.ip);

	if (tb[IPSET_ATTR_IP_TO]) {

		ret = ip_set_get_hostipaddr4(tb[IPSET_ATTR_IP_TO], &ip_to);

		if (ret)
@@ -231,8 +231,7 @@ hash_ipportip4_uadt(struct ip_set *set, struct nlattr *tb[], 
		if (!cidr || cidr > 32)

			return -IPSET_ERR_INVALID_CIDR;

		ip_set_mask_from_to(ip, ip_to, cidr);

	} else

		ip_to = ip;

	}



	port_to = port = ntohs(data.port);

	if (with_ports && tb[IPSET_ATTR_PORT_TO]) {

net/netfilter/ipset/ip_set_hash_ipportnet.c

+5 −2
Original line number Diff line number Diff line
@@ -215,8 +215,8 @@ hash_ipportnet4_uadt(struct ip_set *set, struct nlattr *tb[], 
	const struct ip_set_hash *h = set->data;

	ipset_adtfn adtfn = set->variant->adt[adt];

	struct hash_ipportnet4_elem data = { .cidr = HOST_MASK - 1 };

	u32 ip, ip_to = 0, p = 0, port, port_to;

	u32 ip2_from = 0, ip2_to, ip2_last, ip2;

	u32 ip, ip_to, p = 0, port, port_to;

	u32 ip2_from, ip2_to, ip2_last, ip2;

	u32 timeout = h->timeout;

	bool with_ports = false;

	u8 cidr;
@@ -286,6 +286,7 @@ hash_ipportnet4_uadt(struct ip_set *set, struct nlattr *tb[], 
		return ip_set_eexist(ret, flags) ? 0 : ret;

	}



	ip_to = ip;

	if (tb[IPSET_ATTR_IP_TO]) {

		ret = ip_set_get_hostipaddr4(tb[IPSET_ATTR_IP_TO], &ip_to);

		if (ret)
@@ -306,6 +307,8 @@ hash_ipportnet4_uadt(struct ip_set *set, struct nlattr *tb[], 
		if (port > port_to)

			swap(port, port_to);

	}



	ip2_to = ip2_from;

	if (tb[IPSET_ATTR_IP2_TO]) {

		ret = ip_set_get_hostipaddr4(tb[IPSET_ATTR_IP2_TO], &ip2_to);

		if (ret)

net/netfilter/nfnetlink_cttimeout.c

+2 −1
Original line number Diff line number Diff line
@@ -41,7 +41,8 @@ MODULE_DESCRIPTION("cttimeout: Extended Netfilter Connection Tracking timeout tu 
static LIST_HEAD(cttimeout_list);



static const struct nla_policy cttimeout_nla_policy[CTA_TIMEOUT_MAX+1] = {

	[CTA_TIMEOUT_NAME]	= { .type = NLA_NUL_STRING },

	[CTA_TIMEOUT_NAME]	= { .type = NLA_NUL_STRING,

				    .len  = CTNL_TIMEOUT_NAME_MAX - 1},

	[CTA_TIMEOUT_L3PROTO]	= { .type = NLA_U16 },

	[CTA_TIMEOUT_L4PROTO]	= { .type = NLA_U8 },

	[CTA_TIMEOUT_DATA]	= { .type = NLA_NESTED },