Skip to content

Check u32 load in u8 attributes

Laura Garcia Liebana netfilter-devel 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest5 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5netfilter: nf_tables: Check u32 load in u8 nft_bitwise attributenet/netfilter/nft_bitwise.c+6 -10 replies
2/5netfilter: nf_tables: Check u32 load in u8 nft_byteorder attributenet/netfilter/nft_byteorder.c+11 -20 replies
3/5netfilter: nf_tables: Check u32 load in u8 nft_cmp attributenet/netfilter/nft_cmp.c+4 -10 replies
4/5netfilter: nf_tables: Check u32 load in u8 nft_immediate attributenet/netfilter/nft_immediate.c+3 -00 replies
5/5netfilter: nf_tables: Check u32 load in u8 nft_nat attributenet/netfilter/nft_nat.c+2 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/5] Check u32 load in u8 attributes

The following patchset adds a check during the load of an u32 value into an u8 attribute which can cause an overflow.

Laura Garcia Liebana (5):
netfilter: nf_tables: Check u32 load in u8 nft_bitwise attribute
netfilter: nf_tables: Check u32 load in u8 nft_byteorder attribute
netfilter: nf_tables: Check u32 load in u8 nft_cmp attribute
netfilter: nf_tables: Check u32 load in u8 nft_immediate attribute
netfilter: nf_tables: Check u32 load in u8 nft_nat attribute

 net/netfilter/nft_bitwise.c   |  7 ++++++-
 net/netfilter/nft_byteorder.c | 13 +++++++++++--
 net/netfilter/nft_cmp.c       |  5 ++++-
 net/netfilter/nft_immediate.c |  3 +++
 net/netfilter/nft_nat.c       |  2 ++
 5 files changed, 26 insertions(+), 4 deletions(-)
Signature · 1 line
2.8.1