summaryrefslogtreecommitdiffstats
path: root/iptables.c
diff options
context:
space:
mode:
authorJan Engelhardt <jengelh@medozas.de>2011-02-21 03:21:18 +0100
committerJan Engelhardt <jengelh@medozas.de>2011-02-21 03:21:18 +0100
commit4b110b426df7bf486a3e7884c56ebb3487023601 (patch)
treedd35cb4a809269587ab8693256f1d74cc0481dfb /iptables.c
parent2d039bcf8421c992fb74849facc2d7205960f68e (diff)
libxtables: fix memory scribble beyond end of array
When using -s "", the "n" variable in the code remains uninitialized and usually scribbes beyond the end of the array. Furthermore, "n" is just as big as entries in the last host lookup. When specifying more than one item to -s, e.g. "-s host,host", "n" is less than "count", and we are not masking the addresses at all (leaving them at addr/32 resp. addr/128). The issue goes back to the initial code from v1.4.5~21. References: http://bugs.debian.org/611990 Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Diffstat (limited to 'iptables.c')
0 files changed, 0 insertions, 0 deletions