Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size

2016-03-20 Thread Florian Westphal
Pablo Neira Ayuso wrote: > This patch introduces the generic __xt_entry_foreach() that includes a > new parameter to account for remaining entry bytes in the table that we > didn't walk so far. If the amount of remaining bytes is zero, then we > keep validating this table, otherwise for < 0 we jus

Re: [PATCH] netfilter: x_tables: ensure e->next_offset consistency with table size

2016-03-18 Thread Eric Dumazet
On Fri, 2016-03-18 at 22:58 +0100, Pablo Neira Ayuso wrote: > This patch introduces the generic __xt_entry_foreach() that includes a > new parameter to account for remaining entry bytes in the table that we > didn't walk so far. If the amount of remaining bytes is zero, then we > keep validating th