diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-07-25 10:46:46 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-08-01 11:45:15 +0200 |
| commit | a206bcb3b02025b23137f3228109d72e0f835c05 (patch) | |
| tree | 517502da0639006d869a3d407d78132c5acb3dea /net/netfilter/nfnetlink_log.c | |
| parent | 71ffe9c77dd7a2b62207953091efa8dafec958dd (diff) | |
| download | op-kernel-dev-a206bcb3b02025b23137f3228109d72e0f835c05.zip op-kernel-dev-a206bcb3b02025b23137f3228109d72e0f835c05.tar.gz | |
netfilter: xt_TCPOPTSTRIP: fix possible off by one access
Fix a possible off by one access since optlen()
touches opt[offset+1] unsafely when i == tcp_hdrlen(skb) - 1.
This patch replaces tcp_hdrlen() by the local variable tcp_hdrlen
that stores the TCP header length, to save some cycles.
Reported-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nfnetlink_log.c')
0 files changed, 0 insertions, 0 deletions
