diff options
author | Patrick McHardy <kaber@trash.net> | 2006-08-01 06:47:31 (GMT) |
---|---|---|
committer | David S. Miller <davem@sunset.davemloft.net> | 2006-08-02 20:38:29 (GMT) |
commit | 3ab720881b6e36bd5190a3a11cee8d8d067c4ad7 (patch) | |
tree | 7c0b9542623555a85476ede5e2a5a5d2c9c734a2 /net/ipv4 | |
parent | b10866fd7dd9ae9b8dd03646d28702a76d624474 (diff) | |
download | linux-fsl-qoriq-3ab720881b6e36bd5190a3a11cee8d8d067c4ad7.tar.xz |
[NETFILTER]: xt_hashlimit/xt_string: missing string validation
The hashlimit table name and the textsearch algorithm need to be
terminated, the textsearch pattern length must not exceed the
maximum size.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4')
-rw-r--r-- | net/ipv4/netfilter/ipt_hashlimit.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/ipv4/netfilter/ipt_hashlimit.c b/net/ipv4/netfilter/ipt_hashlimit.c index 92980ab..6b66244 100644 --- a/net/ipv4/netfilter/ipt_hashlimit.c +++ b/net/ipv4/netfilter/ipt_hashlimit.c @@ -508,6 +508,9 @@ hashlimit_checkentry(const char *tablename, if (!r->cfg.expire) return 0; + if (r->name[sizeof(r->name) - 1] != '\0') + return 0; + /* This is the best we've got: We cannot release and re-grab lock, * since checkentry() is called before ip_tables.c grabs ipt_mutex. * We also cannot grab the hashtable spinlock, since htable_create will |