On Sat, Oct 29, 2016 at 09:56:27PM +0800, Liping Zhang wrote: > From: Liping Zhang <[email protected]> > > After call nft_data_init, size is already validated and desc.len will > not exceed the sizeof(struct nft_data), i.e. 16 bytes. So it will never > exceed U8_MAX. > > Furthermore, in nft_immediate_init, we forget to call nft_data_uninit > when desc.len exceeds U8_MAX, although this will not happen, but it's > a logical mistake. > > Now remove these redundant validation introduced by commit 36b701fae12a > ("netfilter: nf_tables: validate maximum value of u32 netlink attributes")
Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
