netdev - [stable] netfilter: ipset: Check and reject crazy /0 input parameters

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 24 Dec 2013 03:00:04 +0000
From:	Ben Hutchings <ben@...adent.org.uk>
To:	David Miller <davem@...emloft.net>,
	Jozsef Kadlecsik <kadlec@...ckhole.kfki.hu>
Cc:	Neutron Soutmun <neo.neutron@...il.com>, 732689@...s.debian.org,
	netdev <netdev@...r.kernel.org>, stable@...r.kerne.org
Subject: [stable] netfilter: ipset: Check and reject crazy /0 input
 parameters

This fix went into Linux 3.7:

commit b9fed748185a96b7cfe74afac4bd228e8af16f01
Author: Jozsef Kadlecsik <kadlec@...ckhole.kfki.hu>
Date:   Tue Sep 4 17:45:59 2012 +0200

    netfilter: ipset: Check and reject crazy /0 input parameters
    
    bitmap:ip and bitmap:ip,mac type did not reject such a crazy range
    when created and using such a set results in a kernel crash.
    The hash types just silently ignored such parameters.
    
    Reject invalid /0 input parameters explicitely.
    
    Signed-off-by: Jozsef Kadlecsik <kadlec@...ckhole.kfki.hu>

Should it also go into stable 3.x.y updates?  I checked that it applies
and builds cleanly on top of 3.2.53.

Ben.

-- 
Ben Hutchings
Unix is many things to many people,
but it's never been everything to anybody.

Download attachment "signature.asc" of type "application/pgp-signature" (829 bytes)