| commit | c49b9f295e513753e6d9bb4444ba502f1aa59b29 | |
| author | Balazs Scheidler <bazsi@balabit.hu> | |
| Mon, 8 Dec 2008 07:53:46 +0000 (7 23:53 -0800) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Mon, 8 Dec 2008 07:53:46 +0000 (7 23:53 -0800) | ||
| tree | ce46987a31304cf239bd8ee46afbc059cefab5dc | treesnapshot (tar.gz zip) |
| parent | 0a0755c9fe47dc9f8271935909c66096e43efbfe | commitdiff |
tproxy: fixe a possible read from an invalid location in the socket match
TIME_WAIT sockets need to be handled specially, and the socket match
casted inet_timewait_sock instances to inet_sock, which are not
compatible.
Handle this special case by checking sk->sk_state.
Signed-off-by: Balazs Scheidler <bazsi@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
TIME_WAIT sockets need to be handled specially, and the socket match
casted inet_timewait_sock instances to inet_sock, which are not
compatible.
Handle this special case by checking sk->sk_state.
Signed-off-by: Balazs Scheidler <bazsi@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/netfilter/xt_socket.c | diffblobblamehistory |