summaryrefslogtreecommitdiffstats
path: root/include/statement.h
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2014-07-23 13:20:50 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2014-07-25 03:41:17 +0200
commit371fdadfafd64b3e364f91a21dac231a16622736 (patch)
tree9e43215af6d95f16ebed09b120a31fec8ca26d83 /include/statement.h
parente2b60d54ab2f580cb4aef5a01c7b36a02aee6cc6 (diff)
mnl: fix crashes when using sets with many elements
nft crashes when adding many elements into a set for two reasons: 1) The overflow of the nla_len field for the NFTA_SET_ELEM_LIST_ELEMENTS attribute. 2) Out-of-bound memory writes to the reserved area for the netlink message, which is solved by the patch entitled ("mnl: introduce NFT_NLMSG_MAXSIZE"). This patch adds the corresponding nla_len overflow check for NFTA_SET_ELEM_LIST_ELEMENTS and it splits the elements in several netlink messages. This should be enough when set updates are handled by the transaction infrastructure. With this patch, nft should be now capable of adding an unlimited number of elements to a given set. Fixes: https://bugzilla.netfilter.org/show_bug.cgi?id=898 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/statement.h')
0 files changed, 0 insertions, 0 deletions