Re: [PATCH 07/23] netfilter: x_tables: check standard target size too

2016-06-06 Thread Pablo Neira Ayuso
On Mon, Jun 06, 2016 at 12:02:10AM +0200, Florian Westphal wrote: > Andreas Schwab wrote: > > > From: Florian Westphal > > > > > > We have targets and standard targets -- the latter carries a verdict. > > > > > > The ip/ip6tables validation functions will

Re: [PATCH 07/23] netfilter: x_tables: check standard target size too

2016-06-05 Thread Florian Westphal
Andreas Schwab wrote: > > From: Florian Westphal > > > > We have targets and standard targets -- the latter carries a verdict. > > > > The ip/ip6tables validation functions will access t->verdict for the > > standard targets to fetch the jump offset or

Re: [PATCH 07/23] netfilter: x_tables: check standard target size too

2016-06-05 Thread Andreas Schwab
Pablo Neira Ayuso writes: > From: Florian Westphal > > We have targets and standard targets -- the latter carries a verdict. > > The ip/ip6tables validation functions will access t->verdict for the > standard targets to fetch the jump offset or verdict for

[PATCH 07/23] netfilter: x_tables: check standard target size too

2016-04-22 Thread Pablo Neira Ayuso
From: Florian Westphal We have targets and standard targets -- the latter carries a verdict. The ip/ip6tables validation functions will access t->verdict for the standard targets to fetch the jump offset or verdict for chainloop detection, but this happens before the targets get