Florian Westphal ce683e5f9d netfilter: x_tables: check for bogus target offset
We're currently asserting that targetoff + targetsize <= nextoff.

Extend it to also check that targetoff is >= sizeof(xt_entry).
Since this is generic code, add an argument pointing to the start of the
match/target, we can then derive the base structure size from the delta.

We also need the e->elems pointer in a followup change to validate matches.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2016-04-14 00:30:37 +02:00
..
2016-03-10 20:54:09 -05:00
2016-03-17 21:05:01 -04:00
2015-11-30 14:47:33 -05:00
2015-11-23 14:56:15 -05:00
2016-02-14 14:36:04 -08:00
2016-03-09 16:36:15 -05:00
2015-10-23 03:05:19 -07:00
2016-03-21 22:56:38 -04:00