| commit | ba7cd5d95f25cc6005f687dabdb4e7a6063adda9 | [log] [tgz] |
|---|---|---|
| author | Cong Wang <xiyou.wangcong@gmail.com> | Wed Jan 31 15:02:47 2018 -0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Fri Feb 02 18:26:37 2018 +0100 |
| tree | 8301371a48f9eb2fcfc3d72fb3c945d47793efaf | |
| parent | 6be3bcd75afb673a37a82e18ba46d50430f172c1 [diff] |
netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
xt_cgroup_info_v1->priv is an internal pointer only used for kernel,
we should not trust what user-space provides.
Reported-by: <syzbot+4fbcfcc0d2e6592bd641@syzkaller.appspotmail.com>
Fixes: c38c4597e4bf ("netfilter: implement xt_cgroup cgroup2 path match")
Cc: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>