| commit | 826035498ec14b77b62a44f0cb6b94d45530db6f | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Jan 21 16:07:00 2020 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Fri Jan 24 20:54:28 2020 +0100 |
| tree | 22dcb670215ae5c943d1fcd2ba8780bb1dbca885 | |
| parent | c83de17dd6308fb74696923e5245de0e3c427206 [diff] |
netfilter: nf_tables: add __nft_chain_type_get()
This new helper function validates that unknown family and chain type
coming from userspace do not trigger an out-of-bound array access. Bail
out in case __nft_chain_type_get() returns NULL from
nft_chain_parse_hook().
Fixes: 9370761c56b6 ("netfilter: nf_tables: convert built-in tables/chains to chain types")
Reported-by: syzbot+156a04714799b1d480bc@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>