tree 512f7e462d332f478c0e3459ca1794abc0c32a9d
parent 0b8d9073539e217f79ec1bff65eb205ac796723d
author Dmitry Vyukov <dvyukov@google.com> 1517228480 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> 1517407164 +0100

netfilter: x_tables: fix pointer leaks to userspace

Several netfilter matches and targets put kernel pointers into
info objects, but don't set usersize in descriptors.
This leads to kernel pointer leaks if a match/target is set
and then read back to userspace.

Properly set usersize for these matches/targets.

Found with manual code inspection.

Fixes: ec2318904965 ("xtables: extend matches and targets with .usersize")
Signed-off-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>