https://github.com/torvalds/linux
Revision 7799652557d966e49512479f4d3b9079bbc01fff authored by Evgeniy Polyakov on 15 November 2007, 23:52:32 UTC, committed by David S. Miller on 15 November 2007, 23:52:32 UTC
Reported by Chuck Ebbert as:

	https://bugzilla.redhat.com/show_bug.cgi?id=259501#c14

This routine is called each time hash should be replaced, nf_conn has
extension list which contains pointers to connection tracking users
(like nat, which is right now the only such user), so when replace takes
place it should copy own extensions. Loop above checks for own
extension, but tries to move higer-layer one, which can lead to above
oops.

Signed-off-by: Evgeniy Polyakov <johnpol@2ka.mipt.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent a5a9726
History
Tip revision: 7799652557d966e49512479f4d3b9079bbc01fff authored by Evgeniy Polyakov on 15 November 2007, 23:52:32 UTC
[NETFILTER]: Fix NULL pointer dereference in nf_nat_move_storage()
Tip revision: 7799652
File Mode Size
Documentation
arch
block
crypto
drivers
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
usr
.gitignore -rw-r--r-- 628 bytes
.mailmap -rw-r--r-- 3.6 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 90.1 KB
Kbuild -rw-r--r-- 1.6 KB
MAINTAINERS -rw-r--r-- 93.2 KB
Makefile -rw-r--r-- 52.2 KB
README -rw-r--r-- 16.7 KB
REPORTING-BUGS -rw-r--r-- 3.0 KB

README

back to top