Florian Westphal eba68981c6 netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule ...

[ Upstream commit 680f6af5337c98d116e4f127cea7845339dba8da ]

If userspace provides a rule blob with trailing data after last target,
we trigger a splat, then convert ruleset to 64bit format (with trailing
data), then pass that to do_replace_finish() which then returns -EINVAL.

Erroring out right away avoids the splat plus unneeded translation and
error unwind.

Fixes: 81e675c227ec ("netfilter: ebtables: add CONFIG_COMPAT support")
Reported-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:46:34 +01:00

..

netfilter

netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule

2020-01-27 14:46:34 +01:00

br_device.c

net: bridge: deny dev_set_mac_address() when unregistering

2019-12-21 10:47:30 +01:00

br_fdb.c

bridge: add tracepoint in br_fdb_update

2017-08-31 11:42:41 -07:00

br_forward.c

net: bridge: Fix ethernet header pointer before check skb forwardable

2019-01-31 08:13:41 +01:00

br_if.c

bridge: Fix error path for kobject_init_and_add()

2019-05-16 19:42:33 +02:00

br_input.c

net: bridge: fix per-port af_packet sockets

2019-04-27 09:35:33 +02:00

br_ioctl.c

bridge: move to workqueue gc

2017-02-06 22:53:13 -05:00

br_mdb.c

bridge/mdb: remove wrong use of NLM_F_MULTI

2019-09-19 09:07:59 +02:00

br_multicast.c

net: bridge: mcast: don't delete permanent entries when fast leave is enabled

2019-08-09 17:53:34 +02:00

br_netfilter_hooks.c

netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()

2020-01-04 14:00:06 +01:00

br_netfilter_ipv6.c

netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING

2019-05-04 09:15:18 +02:00

br_netlink_tunnel.c

netlink: pass extended ACK struct to parsing functions

2017-04-13 13:58:22 -04:00

br_netlink.c

net: bridge: fix early call to br_stp_change_bridge_id and plug newlink leaks

2018-01-02 20:31:09 +01:00

br_nf_core.c

net: add bool confirm_neigh parameter for dst_ops.update_pmtu

2020-01-04 14:00:14 +01:00

br_private_stp.h

net: bridge: add helper to set topology change

2016-12-10 21:27:23 -05:00

br_private_tunnel.h

bridge: vlan dst_metadata hooks in ingress and egress paths

2017-02-03 15:21:22 -05:00

br_private.h

bridge: switchdev: Use an helper to clear forward mark

2017-09-05 11:51:47 -07:00

br_stp_bpdu.c

net: bridge: stp: don't cache eth dest pointer before skb pull

2019-07-31 07:28:46 +02:00

br_stp_if.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-06-06 22:20:08 -04:00

br_stp_timer.c

bridge: start hello_timer when enabling KERNEL_STP in br_stp_start

2017-05-21 13:33:28 -04:00

br_stp.c

bridge: move to workqueue gc

2017-02-06 22:53:13 -05:00

br_switchdev.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

br_sysfs_br.c

net: bridge: constify attribute_group structures.

2017-06-29 15:48:52 -04:00

br_sysfs_if.c

bridge: check brport attr show in brport_show

2018-03-08 22:41:07 -08:00

br_vlan_tunnel.c

bridge: vlan_tunnel: explicitly reset metadata attrs to NULL on failure

2017-02-17 13:33:41 -05:00

br_vlan.c

net: bridge: delete local fdb on device init failure

2019-08-09 17:53:34 +02:00

br.c

net: bridge: Receive notification about successful FDB offload

2017-06-08 14:16:25 -04:00

Kconfig

…

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00