Patrick McHardy 45d9bcda21 netfilter: nf_tables: validate len in nft_validate_data_load() ...

For values spanning multiple registers, we need to validate that enough
space is available from the destination register onwards. Add a len
argument to nft_validate_data_load() and consolidate the existing length
validations in preparation of that.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2015-04-13 16:25:49 +02:00

..

ebt_802_3.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_among.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_arp.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_arpreply.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ebt_dnat.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_ip6.c

netfilter: ebt_ip6: fix source and destination matching

2013-11-19 15:33:29 +01:00

ebt_ip.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_limit.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_log.c

netfilter: bridge: add generic packet logger

2014-06-27 13:20:47 +02:00

ebt_mark_m.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_mark.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ebt_nflog.c

netfilter: nf_log: prepare net namespace support for loggers

2013-04-05 20:12:54 +02:00

ebt_pkttype.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_redirect.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_snat.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_stp.c

bridge: netfilter: Convert compare_ether_addr to ether_addr_equal

2012-05-09 20:49:17 -04:00

ebt_vlan.c

net: rename vlan_tx_* helpers since "tx" is misleading there

2015-01-13 17:51:08 -05:00

ebtable_broute.c

bridge: change the position of '{' to the pre line

2013-12-19 19:27:26 -05:00

ebtable_filter.c

netfilter: Make nf_hookfn use nf_hook_state.

2015-04-04 12:31:38 -04:00

ebtable_nat.c

netfilter: Make nf_hookfn use nf_hook_state.

2015-04-04 12:31:38 -04:00

ebtables.c

net: rename vlan_tx_* helpers since "tx" is misleading there

2015-01-13 17:51:08 -05:00

Kconfig

netfilter: bridge: add reject support

2014-07-22 12:00:22 +02:00

Makefile

netfilter: kill remnants of ulog targets

2014-07-25 14:55:44 +02:00

nf_log_bridge.c

netfilter: bridge: add generic packet logger

2014-06-27 13:20:47 +02:00

nf_tables_bridge.c

netfilter: Pass nf_hook_state through nft_set_pktinfo*().

2015-04-04 12:54:27 -04:00

nft_meta_bridge.c

netfilter: nf_tables: validate len in nft_validate_data_load()

2015-04-13 16:25:49 +02:00

nft_reject_bridge.c

netfilter: Fix switch statement warnings with recent gcc.

2015-04-08 15:20:50 -04:00