diff options
| author | Patrick McHardy <kaber@trash.net> | 2006-08-01 02:47:31 -0400 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-08-02 16:38:29 -0400 |
| commit | 3ab720881b6e36bd5190a3a11cee8d8d067c4ad7 (patch) | |
| tree | 7c0b9542623555a85476ede5e2a5a5d2c9c734a2 /net/netfilter | |
| parent | b10866fd7dd9ae9b8dd03646d28702a76d624474 (diff) | |
[NETFILTER]: xt_hashlimit/xt_string: missing string validation
The hashlimit table name and the textsearch algorithm need to be
terminated, the textsearch pattern length must not exceed the
maximum size.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter')
| -rw-r--r-- | net/netfilter/xt_string.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/net/netfilter/xt_string.c b/net/netfilter/xt_string.c index 0ebb6ac2c8c7..d8e3891b5f8b 100644 --- a/net/netfilter/xt_string.c +++ b/net/netfilter/xt_string.c | |||
| @@ -55,7 +55,10 @@ static int checkentry(const char *tablename, | |||
| 55 | /* Damn, can't handle this case properly with iptables... */ | 55 | /* Damn, can't handle this case properly with iptables... */ |
| 56 | if (conf->from_offset > conf->to_offset) | 56 | if (conf->from_offset > conf->to_offset) |
| 57 | return 0; | 57 | return 0; |
| 58 | 58 | if (conf->algo[XT_STRING_MAX_ALGO_NAME_SIZE - 1] != '\0') | |
| 59 | return 0; | ||
| 60 | if (conf->patlen > XT_STRING_MAX_PATTERN_SIZE) | ||
| 61 | return 0; | ||
| 59 | ts_conf = textsearch_prepare(conf->algo, conf->pattern, conf->patlen, | 62 | ts_conf = textsearch_prepare(conf->algo, conf->pattern, conf->patlen, |
| 60 | GFP_KERNEL, TS_AUTOLOAD); | 63 | GFP_KERNEL, TS_AUTOLOAD); |
| 61 | if (IS_ERR(ts_conf)) | 64 | if (IS_ERR(ts_conf)) |