From: Olivier MATZ <olivier.matz@6wind.com>
To: netdev@vger.kernel.org, netfilter-devel@vger.kernel.org,
Patrick McHardy <kaber@netfilter.org>
Subject: [PATCH] sctp: chunkmap size is too large
Date: Fri, 30 Jan 2009 16:43:07 +0100 [thread overview]
Message-ID: <4983200B.2080707@6wind.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 607 bytes --]
Hi all,
I think that the chunkmap field in struct xt_sctp_info is
too large: we have 256 chunk types and it's a bitfield,
so the table should be 256 bits (8 uint32_t) instead
of 64 uint32_t.
I updated the size of the table, and I did some cosmetic
changes in SCTP_CHUNKMAP_* macros (use a mask instead of
a modulo).
netfilter/xt_sctp.h | 30 ++++++++++++++++--------------
netfilter_ipv4/ipt_sctp.h | 30 ++++++++++++++++--------------
2 files changed, 32 insertions(+), 28 deletions(-)
Can someone have a look at it ? Please CC me for any replies
as I'm not on the list.
Thanks,
Olivier
[-- Attachment #2: linux_sctp_chunkmap_too_large.diff --]
[-- Type: text/x-patch, Size: 4063 bytes --]
diff -r ce4087e26684 include/linux/netfilter/xt_sctp.h
--- a/include/linux/netfilter/xt_sctp.h Wed Jan 28 20:01:08 2009 +0000
+++ b/include/linux/netfilter/xt_sctp.h Fri Jan 30 16:25:55 2009 +0100
@@ -15,11 +15,13 @@
#define XT_NUM_SCTP_FLAGS 4
+#define sizeof_bits(type) (sizeof(type) * 8)
+
struct xt_sctp_info {
u_int16_t dpts[2]; /* Min, Max */
u_int16_t spts[2]; /* Min, Max */
- u_int32_t chunkmap[256 / sizeof (u_int32_t)]; /* Bit mask of chunks to be matched according to RFC 2960 */
+ u_int32_t chunkmap[256 / sizeof_bits(u_int32_t)]; /* Bit mask of chunks to be matched according to RFC 2960 */
#define SCTP_CHUNK_MATCH_ANY 0x01 /* Match if any of the chunk types are present */
#define SCTP_CHUNK_MATCH_ALL 0x02 /* Match if all of the chunk types are present */
@@ -33,24 +35,24 @@
u_int32_t invflags;
};
-#define bytes(type) (sizeof(type) * 8)
+#define SCTP_MODULO(chunktype, type) (chunktype & (sizeof_bits(type)-1))
-#define SCTP_CHUNKMAP_SET(chunkmap, type) \
- do { \
- (chunkmap)[type / bytes(u_int32_t)] |= \
- 1 << (type % bytes(u_int32_t)); \
+#define SCTP_CHUNKMAP_SET(chunkmap, chunktype) \
+ do { \
+ chunkmap[chunktype / sizeof_bits(u_int32_t)] |= \
+ 1 << SCTP_MODULO(chunktype, u_int32_t); \
} while (0)
-#define SCTP_CHUNKMAP_CLEAR(chunkmap, type) \
- do { \
- (chunkmap)[type / bytes(u_int32_t)] &= \
- ~(1 << (type % bytes(u_int32_t))); \
+#define SCTP_CHUNKMAP_CLEAR(chunkmap, chunktype) \
+ do { \
+ chunkmap[chunktype / sizeof_bits(u_int32_t)] &= \
+ ~(1 << SCTP_MODULO(chunktype, u_int32_t)); \
} while (0)
-#define SCTP_CHUNKMAP_IS_SET(chunkmap, type) \
-({ \
- ((chunkmap)[type / bytes (u_int32_t)] & \
- (1 << (type % bytes (u_int32_t)))) ? 1: 0; \
+#define SCTP_CHUNKMAP_IS_SET(chunkmap, chunktype) \
+({ \
+ (chunkmap[chunktype / sizeof_bits(u_int32_t)] & \
+ (1 << SCTP_MODULO(chunktype, u_int32_t))) ? 1 : 0; \
})
#define SCTP_CHUNKMAP_RESET(chunkmap) \
diff -r ce4087e26684 include/linux/netfilter_ipv4/ipt_sctp.h
--- a/include/linux/netfilter_ipv4/ipt_sctp.h Wed Jan 28 20:01:08 2009 +0000
+++ b/include/linux/netfilter_ipv4/ipt_sctp.h Fri Jan 30 16:25:55 2009 +0100
@@ -16,11 +16,13 @@
#define IPT_NUM_SCTP_FLAGS 4
+#define sizeof_bits(type) (sizeof(type) * 8)
+
struct ipt_sctp_info {
u_int16_t dpts[2]; /* Min, Max */
u_int16_t spts[2]; /* Min, Max */
- u_int32_t chunkmap[256 / sizeof (u_int32_t)]; /* Bit mask of chunks to be matched according to RFC 2960 */
+ u_int32_t chunkmap[256 / sizeof_bits(u_int32_t)]; /* Bit mask of chunks to be matched according to RFC 2960 */
#define SCTP_CHUNK_MATCH_ANY 0x01 /* Match if any of the chunk types are present */
#define SCTP_CHUNK_MATCH_ALL 0x02 /* Match if all of the chunk types are present */
@@ -34,24 +36,24 @@
u_int32_t invflags;
};
-#define bytes(type) (sizeof(type) * 8)
+#define SCTP_MODULO(chunktype, type) (chunktype & (sizeof_bits(type)-1))
-#define SCTP_CHUNKMAP_SET(chunkmap, type) \
- do { \
- chunkmap[type / bytes(u_int32_t)] |= \
- 1 << (type % bytes(u_int32_t)); \
+#define SCTP_CHUNKMAP_SET(chunkmap, chunktype) \
+ do { \
+ chunkmap[chunktype / sizeof_bits(u_int32_t)] |= \
+ 1 << SCTP_MODULO(chunktype, u_int32_t); \
} while (0)
-#define SCTP_CHUNKMAP_CLEAR(chunkmap, type) \
- do { \
- chunkmap[type / bytes(u_int32_t)] &= \
- ~(1 << (type % bytes(u_int32_t))); \
+#define SCTP_CHUNKMAP_CLEAR(chunkmap, chunktype) \
+ do { \
+ chunkmap[chunktype / sizeof_bits(u_int32_t)] &= \
+ ~(1 << SCTP_MODULO(chunktype, u_int32_t)); \
} while (0)
-#define SCTP_CHUNKMAP_IS_SET(chunkmap, type) \
-({ \
- (chunkmap[type / bytes (u_int32_t)] & \
- (1 << (type % bytes (u_int32_t)))) ? 1: 0; \
+#define SCTP_CHUNKMAP_IS_SET(chunkmap, chunktype) \
+({ \
+ (chunkmap[chunktype / sizeof_bits(u_int32_t)] & \
+ (1 << SCTP_MODULO(chunktype, u_int32_t))) ? 1 : 0; \
})
#define SCTP_CHUNKMAP_RESET(chunkmap) \
next reply other threads:[~2009-01-30 15:43 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-01-30 15:43 Olivier MATZ [this message]
2009-02-01 9:14 ` [PATCH] sctp: chunkmap size is too large David Miller
2009-02-04 10:12 ` Jan Engelhardt
2009-02-09 13:50 ` Patrick McHardy
2009-02-02 9:23 ` Olivier MATZ
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4983200B.2080707@6wind.com \
--to=olivier.matz@6wind.com \
--cc=kaber@netfilter.org \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).