From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wm0-f67.google.com ([74.125.82.67]:32889 "EHLO mail-wm0-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751719AbcDWQq7 (ORCPT ); Sat, 23 Apr 2016 12:46:59 -0400 Received: by mail-wm0-f67.google.com with SMTP id r12so11587408wme.0 for ; Sat, 23 Apr 2016 09:46:58 -0700 (PDT) Subject: Re: [patch added to 3.12-stable] netfilter: x_tables: fix unconditional helper To: Michal Kubecek References: <1461240870-2373-1-git-send-email-jslaby@suse.cz> <1461240870-2373-9-git-send-email-jslaby@suse.cz> <20160422153817.GB30578@unicorn.suse.cz> Cc: stable@vger.kernel.org, Florian Westphal , Pablo Neira Ayuso From: Jiri Slaby Message-ID: <571BA700.4090000@suse.cz> Date: Sat, 23 Apr 2016 18:46:56 +0200 MIME-Version: 1.0 In-Reply-To: <20160422153817.GB30578@unicorn.suse.cz> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Sender: stable-owner@vger.kernel.org List-ID: On 04/22/2016, 05:38 PM, Michal Kubecek wrote: > On Thu, Apr 21, 2016 at 02:14:22PM +0200, Jiri Slaby wrote: >> From: Florian Westphal >> >> This patch has been added to the 3.12 stable tree. If you have any >> objections, please let us know. >> >> =============== >> >> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309 upstream. > ... > > You picked > > bdf533de6968 ("netfilter: x_tables: validate e->target_offset early") > 54d83fc74aa9 ("netfilter: x_tables: fix unconditional helper") > > but omitted > > 6e94e0cfb088 ("netfilter: x_tables: make sure e->next_offset covers remaining blob size") > > from the same series. Is it on purpose? No, I omitted that. Now fixed. Thanks. -- js suse labs