summaryrefslogtreecommitdiffstats
path: root/lib/ipset_hash_ipmark.c
diff options
context:
space:
mode:
authorJozsef Kadlecsik <kadlec@netfilter.org>2020-01-19 12:04:13 +0100
committerJozsef Kadlecsik <kadlec@netfilter.org>2020-01-19 22:09:38 +0100
commitb661f385ab7457f4d45b2693631b590aa26c8a8f (patch)
tree0f1eac0549c5a127b8bf0850b8b1ba0375b8f7dc /lib/ipset_hash_ipmark.c
parentd5bfa437b4c0efb49873c5f5e4d2e1d543252112 (diff)
netfilter: ipset: use bitmap infrastructure completely
The bitmap allocation did not use full unsigned long sizes when calculating the required size and that was triggered by KASAN as slab-out-of-bounds read in several places. The patch fixes all of them. Reported-by: syzbot+fabca5cbf5e54f3fe2de@syzkaller.appspotmail.com Reported-by: syzbot+827ced406c9a1d9570ed@syzkaller.appspotmail.com Reported-by: syzbot+190d63957b22ef673ea5@syzkaller.appspotmail.com Reported-by: syzbot+dfccdb2bdb4a12ad425e@syzkaller.appspotmail.com Reported-by: syzbot+df0d0f5895ef1f41a65b@syzkaller.appspotmail.com Reported-by: syzbot+b08bd19bb37513357fd4@syzkaller.appspotmail.com Reported-by: syzbot+53cdd0ec0bbabd53370a@syzkaller.appspotmail.com Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Diffstat (limited to 'lib/ipset_hash_ipmark.c')
0 files changed, 0 insertions, 0 deletions