netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
  • * [PATCH 6/6] netfilter: xt_u32: fix length checks in u32_match_it
           [not found] <exportbomb.1187270320@pinky>
           [not found] ` <20070815235825.GB17004@redhat.com>
    @ 2007-08-16 13:19 ` Andy Whitcroft
      2007-08-16 14:32   ` Patrick McHardy
      1 sibling, 1 reply; 15+ messages in thread
    From: Andy Whitcroft @ 2007-08-16 13:19 UTC (permalink / raw)
      To: linux-kernel; +Cc: Andrew Morton, Randy Dunlap, netfilter-devel, Andy Whitcroft
    
    
    It seems an extraneous trailing ';' has slipped into the skb length
    checks in u32_match_it() triggering an unconditional missmatch.
    
    Signed-off-by: Andy Whitcroft <apw@shadowen.org>
    Cc: netfilter-devel@lists.netfilter.org
    ---
     net/netfilter/xt_u32.c |    2 +-
     1 files changed, 1 insertions(+), 1 deletions(-)
    diff --git a/net/netfilter/xt_u32.c b/net/netfilter/xt_u32.c
    index 74f9b14..bec4279 100644
    --- a/net/netfilter/xt_u32.c
    +++ b/net/netfilter/xt_u32.c
    @@ -36,7 +36,7 @@ static bool u32_match_it(const struct xt_u32 *data,
     		at  = 0;
     		pos = ct->location[0].number;
     
    -		if (skb->len < 4 || pos > skb->len - 4);
    +		if (skb->len < 4 || pos > skb->len - 4)
     			return false;
     
     		ret   = skb_copy_bits(skb, pos, &n, sizeof(n));
    
    ^ permalink raw reply related	[flat|nested] 15+ messages in thread

  • end of thread, other threads:[~2007-08-18 15:14 UTC | newest]
    
    Thread overview: 15+ messages (download: mbox.gz follow: Atom feed
    -- links below jump to the message on this page --
         [not found] <exportbomb.1187270320@pinky>
         [not found] ` <20070815235825.GB17004@redhat.com>
    2007-08-16  0:40   ` drivers/infiniband/mlx/mad.c misplaced ; Joe Perches
    2007-08-16  2:19     ` Kok, Auke
    2007-08-16  3:17       ` Joe Perches
    2007-08-16  4:20         ` Kok, Auke
    2007-08-16 10:21         ` [netfilter-core] " Patrick McHardy
    2007-08-16 14:05       ` Andy Whitcroft
    2007-08-16  8:46     ` Heiko Carstens
    2007-08-16 10:22       ` Ilpo Järvinen
    2007-08-16 11:01         ` Karsten Keil
    2007-08-18 15:14           ` Daniel Schaffrath
    2007-08-16 12:41         ` Satyam Sharma
    2007-08-16 14:52     ` Jeff Dike
    2007-08-16 16:19     ` Paul Mundt
    2007-08-16 13:19 ` [PATCH 6/6] netfilter: xt_u32: fix length checks in u32_match_it Andy Whitcroft
    2007-08-16 14:32   ` Patrick McHardy
    

    This is a public inbox, see mirroring instructions
    for how to clone and mirror all data and code used for this inbox;
    as well as URLs for NNTP newsgroup(s).