From: Dan Carpenter <dan.carpen...@oracle.com>
Date: Sat, 22 Sep 2018 16:46:48 +0300

> If "td->u.target_size" is larger than sizeof(struct xt_entry_target) we
> return -EINVAL.  But we don't check whether it's smaller than
> sizeof(struct xt_entry_target) and that could lead to an out of bounds
> read.
> 
> Fixes: 7ba699c604ab ("[NET_SCHED]: Convert actions from rtnetlink to new 
> netlink API")
> Signed-off-by: Dan Carpenter <dan.carpen...@oracle.com>

Applied.

Reply via email to