mirror of
https://github.com/torvalds/linux
synced 2024-07-21 10:41:44 +00:00
fd2a55e74a
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
1) Fix broken listing of set elements when table has an owner.
2) Fix conntrack refcount leak in ctnetlink with related conntrack
entries, from Hangyu Hua.
3) Fix use-after-free/double-free in ctnetlink conntrack insert path,
from Florian Westphal.
4) Fix ip6t_rpfilter with VRF, from Phil Sutter.
5) Fix use-after-free in ebtables reported by syzbot, also from Florian.
6) Use skb->len in xt_length to deal with IPv6 jumbo packets,
from Xin Long.
7) Fix NETLINK_LISTEN_ALL_NSID with ctnetlink, from Florian Westphal.
8) Fix memleak in {ip_,ip6_,arp_}tables in ENOMEM error case,
from Pavel Tikhomirov.
* git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf:
netfilter: x_tables: fix percpu counter block leak on error path when creating new netns
netfilter: ctnetlink: make event listener tracking global
netfilter: xt_length: use skb len to match in length_mt6
netfilter: ebtables: fix table blob use-after-free
netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
netfilter: conntrack: fix rmmod double-free race
netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
netfilter: nf_tables: allow to fetch set elements when table has an owner
====================
Link: https://lore.kernel.org/r/20230222092137.88637-1-pablo@netfilter.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
67 lines
1.6 KiB
C
67 lines
1.6 KiB
C
// SPDX-License-Identifier: GPL-2.0-only
|
|
/* Kernel module to match packet length. */
|
|
/* (C) 1999-2001 James Morris <jmorros@intercode.com.au>
|
|
*/
|
|
|
|
#include <linux/module.h>
|
|
#include <linux/skbuff.h>
|
|
#include <linux/ipv6.h>
|
|
#include <net/ip.h>
|
|
|
|
#include <linux/netfilter/xt_length.h>
|
|
#include <linux/netfilter/x_tables.h>
|
|
|
|
MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
|
|
MODULE_DESCRIPTION("Xtables: Packet length (Layer3,4,5) match");
|
|
MODULE_LICENSE("GPL");
|
|
MODULE_ALIAS("ipt_length");
|
|
MODULE_ALIAS("ip6t_length");
|
|
|
|
static bool
|
|
length_mt(const struct sk_buff *skb, struct xt_action_param *par)
|
|
{
|
|
const struct xt_length_info *info = par->matchinfo;
|
|
u32 pktlen = skb_ip_totlen(skb);
|
|
|
|
return (pktlen >= info->min && pktlen <= info->max) ^ info->invert;
|
|
}
|
|
|
|
static bool
|
|
length_mt6(const struct sk_buff *skb, struct xt_action_param *par)
|
|
{
|
|
const struct xt_length_info *info = par->matchinfo;
|
|
u32 pktlen = skb->len;
|
|
|
|
return (pktlen >= info->min && pktlen <= info->max) ^ info->invert;
|
|
}
|
|
|
|
static struct xt_match length_mt_reg[] __read_mostly = {
|
|
{
|
|
.name = "length",
|
|
.family = NFPROTO_IPV4,
|
|
.match = length_mt,
|
|
.matchsize = sizeof(struct xt_length_info),
|
|
.me = THIS_MODULE,
|
|
},
|
|
{
|
|
.name = "length",
|
|
.family = NFPROTO_IPV6,
|
|
.match = length_mt6,
|
|
.matchsize = sizeof(struct xt_length_info),
|
|
.me = THIS_MODULE,
|
|
},
|
|
};
|
|
|
|
static int __init length_mt_init(void)
|
|
{
|
|
return xt_register_matches(length_mt_reg, ARRAY_SIZE(length_mt_reg));
|
|
}
|
|
|
|
static void __exit length_mt_exit(void)
|
|
{
|
|
xt_unregister_matches(length_mt_reg, ARRAY_SIZE(length_mt_reg));
|
|
}
|
|
|
|
module_init(length_mt_init);
|
|
module_exit(length_mt_exit);
|