Florian Westphal 7d35812c32 netfilter: x_tables: add and use xt_check_entry_offsets
Currently arp/ip and ip6tables each implement a short helper to check that
the target offset is large enough to hold one xt_entry_target struct and
that t->u.target_size fits within the current rule.

Unfortunately these checks are not sufficient.

To avoid adding new tests to all of ip/ip6/arptables move the current
checks into a helper, then extend this helper in followup patches.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2016-04-14 00:30:35 +02:00
..
2016-03-10 20:54:09 -05:00
2016-03-17 21:05:01 -04:00
2015-11-30 14:47:33 -05:00
2015-11-23 14:56:15 -05:00
2016-02-14 14:36:04 -08:00
2016-03-09 16:36:15 -05:00
2015-10-23 03:05:19 -07:00
2016-03-21 22:56:38 -04:00