projects / linux-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0e03c64) | patch
netfilter: ctnetlink: use helper function to calculate expect ID
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 13 Jul 2024 14:47:38 +0000 (16:47 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Jul 2024 17:00:47 +0000 (19:00 +0200)
commit782161895eb4ac45cf7cfa8db375bd4766cb8299
tree2cc7ca097db4f6b0a5e9e8502d6d5ed5e81f2814tree
parent0e03c643dc9389e61fa484562dae58c8d6e96d63commit | diff
netfilter: ctnetlink: use helper function to calculate expect ID

Delete expectation path is missing a call to the nf_expect_get_id()
helper function to calculate the expectation ID, otherwise LSB of the
expectation object address is leaked to userspace.

Fixes: 3c79107631db ("netfilter: ctnetlink: don't use conntrack/expect object addresses as id")
Reported-by: zdi-disclosures@trendmicro.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_netlink.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)