Files
linux/include
Pablo Neira Ayuso 5a4bb158f4 netfilter: nf_tables: replace BUG_ON by element length check
[ Upstream commit c39ba4de6b ]

BUG_ON can be triggered from userspace with an element with a large
userdata area. Replace it by length check and return EINVAL instead.
Over time extensions have been growing in size.

Pick a sufficiently old Fixes: tag to propagate this fix.

Fixes: 7d7402642e ("netfilter: nf_tables: variable sized set element keys / data")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-07-21 21:24:23 +02:00
..
2021-09-20 12:43:34 +01:00