diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-05-07 03:22:18 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-05-16 17:35:53 +0200 |
| commit | bc6bcb59dd7c184d229f9e86d08aa56059938a4c (patch) | |
| tree | 1305eb74bb354d76cc815910a3ebe1f803b7a6f4 /include/net | |
| parent | 8cdb46da06ea94543a3b2e53e3e92736421d1093 (diff) | |
| download | linux-3.10-bc6bcb59dd7c184d229f9e86d08aa56059938a4c.tar.gz linux-3.10-bc6bcb59dd7c184d229f9e86d08aa56059938a4c.tar.bz2 linux-3.10-bc6bcb59dd7c184d229f9e86d08aa56059938a4c.zip | |
netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary
This target assumes that tcph->doff is well-formed, that may be well
not the case. Add extra sanity checkings to avoid possible crash due
to read/write out of the real packet boundary. After this patch, the
default action on malformed TCP packets is to drop them. Moreover,
fragments are skipped.
Reported-by: Rafal Kupka <rkupka@telemetry.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net')
0 files changed, 0 insertions, 0 deletions