Florian Westphal
3e38df136e
netfilter: nf_tables: fix oob access ...
BUG: KASAN: slab-out-of-bounds in nf_tables_rule_destroy+0xf1/0x130 at addr ffff88006a4c35c8
Read of size 8 by task nft/1607
When we've destroyed last valid expr, nft_expr_next() returns an invalid expr.
We must not dereference it unless it passes != nft_expr_last() check.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2016-12-14 23:39:06 +01:00
2016-09-23 13:47:44 -04:00
2016-10-20 14:51:10 -04:00
2016-11-18 10:59:15 -05:00
2016-10-21 13:57:50 -04:00
2016-12-06 21:33:19 -05:00
2016-12-08 07:50:24 +01:00
2016-12-10 21:28:28 -05:00
2016-12-06 21:33:19 -05:00
2016-12-07 10:45:57 +01:00
2016-11-10 20:13:08 +01:00
2016-12-09 23:06:10 -05:00
2016-12-03 23:54:25 -05:00
2016-12-03 12:29:53 -05:00
2016-11-14 13:17:21 -05:00
2016-12-03 12:29:53 -05:00
2016-11-07 20:15:55 -05:00
2016-10-30 12:42:58 -04:00
2016-11-30 12:33:07 +01:00
2016-12-09 22:12:21 -05:00
2016-12-07 19:16:46 -05:00
2016-10-27 16:16:09 -04:00
2016-10-12 01:56:04 -04:00
2016-10-07 15:36:58 -07:00
2016-11-18 10:59:15 -05:00
2016-12-10 23:29:11 -05:00
2016-11-14 13:17:21 -05:00
2016-12-09 22:59:05 -05:00
2016-12-06 21:33:19 -05:00
2016-10-20 11:23:08 -04:00
2016-12-14 23:39:06 +01:00
2016-10-27 16:16:09 -04:00
2016-12-10 17:25:58 -05:00
2016-10-27 16:16:09 -04:00
2016-12-03 12:29:53 -05:00
2016-12-03 12:29:53 -05:00
2016-11-18 10:59:15 -05:00
2016-12-03 12:29:53 -05:00
2016-11-07 13:24:41 -05:00
2016-12-08 11:47:08 -05:00
2016-11-16 23:22:17 -05:00
2016-10-12 01:51:49 -04:00
2016-11-22 13:27:16 -05:00
2016-10-30 12:42:58 -04:00
2016-12-03 12:29:53 -05:00
2016-11-22 13:27:16 -05:00
2016-11-24 11:53:15 -05:00
2016-10-27 16:16:09 -04:00
2016-12-09 22:59:05 -05:00
2016-12-03 12:29:53 -05:00
2016-12-02 10:51:49 -05:00
2016-12-10 17:27:07 -05:00
2016-10-06 09:52:23 -07:00
3e38df136e