Gao Feng c953d63548 ebtables: arpreply: Add the standard target sanity check ...

The info->target comes from userspace and it would be used directly.
So we need to add the sanity check to make sure it is a valid standard
target, although the ebtables tool has already checked it. Kernel needs
to validate anything coming from userspace.

If the target is set as an evil value, it would break the ebtables
and cause a panic. Because the non-standard target is treated as one
offset.

Now add one helper function ebt_invalid_target, and we would replace
the macro INVALID_TARGET later.

Signed-off-by: Gao Feng <gfree.wind@vip.163.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2017-05-16 10:24:27 +02:00

..

ebt_802_3.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_among.c

lib/vsprintf.c: remove %Z support

2017-02-27 18:43:47 -08:00

ebt_arp.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_arpreply.c

ebtables: arpreply: Add the standard target sanity check

2017-05-16 10:24:27 +02:00

ebt_dnat.c

bridge: ebtables: fix reception of frames DNAT-ed to bridge device/port

2017-04-25 11:08:31 +02:00

ebt_ip6.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_ip.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_limit.c

xtables: extend matches and targets with .usersize

2017-01-09 17:24:55 +01:00

ebt_log.c

netfilter: Use pr_cont where appropriate

2017-03-06 18:00:48 +01:00

ebt_mark_m.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_mark.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ebt_nflog.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ebt_pkttype.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_redirect.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ebt_snat.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_stp.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_vlan.c

netfilter-bridge: use netdev style comments

2015-11-23 17:54:39 +01:00

ebtable_broute.c

ebtables: remove nf_hook_register usage

2017-04-26 09:30:21 +02:00

ebtable_filter.c

ebtables: remove nf_hook_register usage

2017-04-26 09:30:21 +02:00

ebtable_nat.c

ebtables: remove nf_hook_register usage

2017-04-26 09:30:21 +02:00

ebtables.c

netfilter: xtables: zero padding in data_to_user

2017-05-15 12:51:38 +02:00

Kconfig

netfilter: nf_log: add packet logging for netdev family

2016-11-01 20:50:30 +01:00

Makefile

netfilter: kill remnants of ulog targets

2014-07-25 14:55:44 +02:00

nf_log_bridge.c

netfilter: nf_log: do not assume ethernet header in netdev family

2016-12-04 20:45:33 +01:00

nf_tables_bridge.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_meta_bridge.c

netfilter: Remove exceptional & on function name

2017-04-07 18:24:47 +02:00

nft_reject_bridge.c

netfilter: nf_tables: validate the expr explicitly after init successfully

2017-03-06 18:22:12 +01:00