Pablo Neira Ayuso 3ce67e3793 netfilter: nf_tables: do not allow mismatch field size and set key length
The set description provides the size of each field in the set whose sum
should not mismatch the set key length, bail out otherwise.

I did not manage to crash nft_set_pipapo with mismatch fields and set key
length so far, but this is UB which must be disallowed.

Fixes: f3a2181e16f1 ("netfilter: nf_tables: Support for sets with multiple ranged fields")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2024-01-17 12:02:50 +01:00
..
2023-10-01 19:09:54 +01:00
2023-12-15 16:25:55 -08:00
2023-12-26 20:31:01 +00:00
2024-01-11 10:07:29 -08:00
2023-12-29 07:46:38 +00:00
2024-01-03 18:37:22 -08:00
2024-01-04 10:29:18 +00:00
2024-01-11 10:07:29 -08:00
2023-12-26 20:31:01 +00:00
2023-12-18 16:46:08 -08:00
2023-12-12 14:24:14 +01:00
2024-01-04 10:23:10 -08:00
2024-01-04 10:23:10 -08:00
2024-01-08 11:43:04 -08:00