mirror of
https://github.com/torvalds/linux
synced 2024-11-05 18:23:50 +00:00
ddc8d029ac
__nf_conntrack_{l3}proto_find() doesn't check the passed protocol family, then it's possible to touch out of the array which has only AF_MAX items. Spotted by Pablo Neira Ayuso. Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp> Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> |
||
---|---|---|
.. | ||
ipv4 | ||
ipv6 | ||
nf_conntrack.h | ||
nf_conntrack_compat.h | ||
nf_conntrack_core.h | ||
nf_conntrack_helper.h | ||
nf_conntrack_l3proto.h | ||
nf_conntrack_protocol.h | ||
nf_conntrack_tuple.h |