Saeed Mirzamohammadi 31cc578ae2
netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create ...
This patch fixes the issue due to:
BUG: KASAN: slab-out-of-bounds in nft_flow_rule_create+0x622/0x6a2
net/netfilter/nf_tables_offload.c:40
Read of size 8 at addr ffff888103910b58 by task syz-executor227/16244
The error happens when expr->ops is accessed early on before performing the boundary check and after nft_expr_next() moves the expr to go out-of-bounds.
This patch checks the boundary condition before expr->ops that fixes the slab-out-of-bounds Read issue.
Add nft_expr_more() and use it to fix this problem.
Signed-off-by: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com >
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org >
2020-10-20 13:54:54 +02:00
2020-06-14 01:57:21 +09:00
2020-08-23 17:36:59 -05:00
2020-09-28 00:51:39 -07:00
2020-08-03 15:48:32 -07:00
2020-09-18 14:12:43 -07:00
2020-07-25 17:49:04 -07:00
2020-10-02 19:11:11 -07:00
2020-09-29 13:22:53 -07:00
2020-09-30 08:34:08 -07:00
2020-10-15 12:33:24 -07:00
2020-10-20 13:54:53 +02:00
2020-09-05 15:57:05 -07:00
2020-10-15 12:43:21 -07:00
2020-10-02 15:27:08 -07:00
2020-10-18 14:50:25 -07:00
2020-09-10 15:09:08 -07:00
2020-09-30 14:21:30 -07:00
2020-08-23 17:36:59 -05:00
2020-10-19 17:32:50 -07:00
2020-10-08 16:06:01 -07:00
2020-10-02 19:11:11 -07:00
2020-10-02 19:11:11 -07:00
2020-10-19 20:07:15 -07:00
2020-10-20 13:54:53 +02:00
2020-10-03 16:51:07 -07:00
2020-07-24 15:41:54 -07:00
2020-08-02 01:02:12 -07:00
2020-10-02 19:11:11 -07:00
2020-08-27 07:55:59 -07:00
2020-06-14 01:57:21 +09:00
2020-07-24 15:41:54 -07:00
2020-10-13 17:33:49 -07:00
2020-09-08 20:12:58 -07:00
2020-08-23 17:36:59 -05:00
2020-10-15 12:43:21 -07:00
2020-10-02 19:11:11 -07:00
2020-10-20 13:54:54 +02:00
2020-10-02 19:11:11 -07:00
2020-10-09 20:22:32 -07:00
2020-08-23 17:36:59 -05:00
2020-09-05 16:01:52 -07:00
2020-06-14 01:57:21 +09:00
2020-10-18 12:29:36 -07:00
2020-09-19 16:40:48 -07:00
2020-08-23 17:36:59 -05:00
2020-10-02 19:11:11 -07:00
2020-10-06 06:01:35 -07:00
2020-10-09 12:32:03 -07:00
2020-08-23 17:36:59 -05:00
2020-10-15 13:28:00 +01:00
2020-10-09 08:08:08 -07:00
2020-10-08 15:44:50 -07:00
2020-10-15 12:43:21 -07:00
2020-10-15 18:42:13 -07:00
2020-09-23 17:46:31 -07:00
2020-10-16 14:09:12 -07:00
2020-10-15 12:43:21 -07:00
2020-10-15 18:42:13 -07:00
2020-08-12 12:56:06 -07:00
2020-10-02 19:11:11 -07:00
2020-10-10 09:12:52 -07:00
2020-08-23 17:36:59 -05:00
2020-10-12 16:16:50 -07:00
2020-10-13 17:33:49 -07:00
2020-10-03 00:02:13 -04:00
2020-06-30 15:57:34 -07:00
2020-09-30 18:01:26 -07:00
2020-10-05 18:40:01 -07:00
31cc578ae2