| commit | abd66e9f3cc50c9c3ba4cf609749374090a2f215 | [log] [tgz] |
|---|---|---|
| author | Laura Garcia Liebana <nevola@gmail.com> | Mon Nov 14 22:33:34 2016 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Nov 24 14:40:03 2016 +0100 |
| tree | e9266a52b4af3fda805bbbb04a466fab69f4c8b9 | |
| parent | 486dcf43da7815baa615822f3e46883ccca5400f [diff] |
netfilter: nft_hash: validate maximum value of u32 netlink hash attribute
Use the function nft_parse_u32_check() to fetch the value and validate
the u32 attribute into the hash len u8 field.
This patch revisits 4da449ae1df9 ("netfilter: nft_exthdr: Add size check
on u8 nft_exthdr attributes").
Fixes: cb1b69b0b15b ("netfilter: nf_tables: add hash expression")
Signed-off-by: Laura Garcia Liebana <nevola@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>