Re: [PATCH nf] netfilter: bridge: ebt_among: add missing match size checks

2018-02-25 Thread Pablo Neira Ayuso
On Mon, Feb 19, 2018 at 03:01:45AM +0100, Florian Westphal wrote: > ebt_among is special, it has a dynamic match size and is exempt > from the central size checks. > > Therefore it must check that the size of the match structure > provided from userspace is sane by making sure em->match_size > is

[PATCH nf] netfilter: bridge: ebt_among: add missing match size checks

2018-02-18 Thread Florian Westphal
ebt_among is special, it has a dynamic match size and is exempt from the central size checks. Therefore it must check that the size of the match structure provided from userspace is sane by making sure em->match_size is at least the minimum size of the expected structure. The module has such a