From: Pablo Neira Ayuso <pablo@netfilter.org>
To: eric.sesterhenn@x41-dsec.de
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [PATCH 1/2] Convert CHECK_BOUND macro to function
Date: Mon, 13 Nov 2017 14:13:33 +0100 [thread overview]
Message-ID: <20171113131333.GA21936@salvia> (raw)
In-Reply-To: <20171113080941.616-1-eric.sesterhenn@x41-dsec.de>
On Mon, Nov 13, 2017 at 09:09:40AM +0100, eric.sesterhenn@x41-dsec.de wrote:
> From: Eric Sesterhenn <eric.sesterhenn@x41-dsec.de>
>
> It is bad practive to return in a macro, this patch
> moves the check into a function.
Applied with minor changes, see below.
[...]
> diff --git a/net/netfilter/nf_conntrack_h323_asn1.c b/net/netfilter/nf_conntrack_h323_asn1.c
> index 89b2e46925c4..f358222b1e5e 100644
> --- a/net/netfilter/nf_conntrack_h323_asn1.c
> +++ b/net/netfilter/nf_conntrack_h323_asn1.c
> @@ -103,7 +103,6 @@ typedef struct {
> #define INC_BIT(bs) if((++(bs)->bit)>7){(bs)->cur++;(bs)->bit=0;}
> #define INC_BITS(bs,b) if(((bs)->bit+=(b))>7){(bs)->cur+=(bs)->bit>>3;(bs)->bit&=7;}
> #define BYTE_ALIGN(bs) if((bs)->bit){(bs)->cur++;(bs)->bit=0;}
> -#define CHECK_BOUND(bs,n) if((bs)->cur+(n)>(bs)->end)return(H323_ERROR_BOUND)
> static unsigned int get_len(bitstr_t *bs);
> static unsigned int get_bit(bitstr_t *bs);
> static unsigned int get_bits(bitstr_t *bs, unsigned int b);
> @@ -166,6 +165,14 @@ static unsigned int get_len(bitstr_t *bs)
> }
>
> /****************************************************************************/
> +static int nf_h323_error_boundary(bitstr_t *bs, size_t bytes)
Make sure you make you patches on top of nf-next.git:
https://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git/
Look, bitstr_t is gone there already, we got a patch to remove
typedefs.
Anyway, I have mangled this here and it's now applied.
It would be great if your follow up patch subject is prefixes like
this:
netfilter: nf_ct_h323: blah
So we know what subsystem this is targeting to, just for the next
time.
Thanks for following up on this!
next prev parent reply other threads:[~2017-11-13 13:13 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-10-09 5:01 [PATCH] Out Of Bound Read in Netfilter Conntrack Eric Sesterhenn
2017-10-12 0:03 ` Florian Westphal
2017-10-13 18:29 ` [PATCH] Bitwise " Eric Sesterhenn
2017-10-17 13:09 ` Pablo Neira Ayuso
2017-10-17 13:48 ` Eric Sesterhenn
2017-10-17 13:53 ` Pablo Neira Ayuso
2017-10-24 16:29 ` [PATCH] " Pablo Neira Ayuso
2017-10-24 16:36 ` Pablo Neira Ayuso
2017-10-25 7:05 ` Eric Sesterhenn
2017-11-06 15:13 ` Pablo Neira Ayuso
2017-11-13 8:09 ` [PATCH 1/2] Convert CHECK_BOUND macro to function eric.sesterhenn
2017-11-13 13:13 ` Pablo Neira Ayuso [this message]
2017-11-13 8:09 ` [PATCH 2/2] Extend nf_h323_error_boundary to work on bits as well eric.sesterhenn
2017-11-13 13:14 ` Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20171113131333.GA21936@salvia \
--to=pablo@netfilter.org \
--cc=eric.sesterhenn@x41-dsec.de \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.