summaryrefslogtreecommitdiffstats
path: root/src/expr/meta.c
diff options
context:
space:
mode:
authorArturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>2013-06-26 13:37:02 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2013-06-27 19:11:11 +0200
commit783a972f6acd680bed92fac36c5388d15620e754 (patch)
tree1a95b955f5f83f84711c9dec39cee2ac6d251308 /src/expr/meta.c
parent34caf0add23aab075c2bbe1a99927c081014cadd (diff)
expr: xml: registers must be <= NFT_REG_MAX
With this patch, all expressions validate that registers are <= NFT_REG_MAX. Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/expr/meta.c')
-rw-r--r--src/expr/meta.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/expr/meta.c b/src/expr/meta.c
index 535b456..41fcff1 100644
--- a/src/expr/meta.c
+++ b/src/expr/meta.c
@@ -163,6 +163,11 @@ static int nft_rule_expr_meta_xml_parse(struct nft_rule_expr *e, char *xml)
return -1;
}
+ if (tmp > NFT_REG_MAX) {
+ mxmlDelete(tree);
+ return -1;
+ }
+
meta->dreg = (uint8_t)tmp;
e->flags |= (1 << NFT_EXPR_META_DREG);