diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2018-01-12 11:16:50 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-01-31 14:52:09 +0100 |
| commit | 0b8d9073539e217f79ec1bff65eb205ac796723d (patch) | |
| tree | f0d0dbebbde42e1f3403099948a6efc1d19d6e39 /net/ncsi | |
| parent | da17c73b6eb74aad3c3c0654394635675b623b3e (diff) | |
| download | op-kernel-dev-0b8d9073539e217f79ec1bff65eb205ac796723d.zip op-kernel-dev-0b8d9073539e217f79ec1bff65eb205ac796723d.tar.gz | |
netfilter: ipset: Fix wraparound in hash:*net* types
Fix wraparound bug which could lead to memory exhaustion when adding an
x.x.x.x-255.255.255.255 range to any hash:*net* types.
Fixes Netfilter's bugzilla id #1212, reported by Thomas Schwark.
Fixes: 48596a8ddc46 ("netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses")
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ncsi')
0 files changed, 0 insertions, 0 deletions
