Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for net:
1) Out-of-bound access to packet data from the snmp nat helper,
from Jann Horn.
2) ICMP(v6) error packets are set as related traffic by conntrack,
update protocol number before calling nf_nat_ipv4_manip_pkt()
to use ICMP(v6) rather than the original protocol number,
from Florian Westphal.
====================
Signed-off-by:
David S. Miller <davem@davemloft.net>
No related branches found
No related tags found
Showing
- net/ipv4/netfilter/nf_nat_l3proto_ipv4.c 1 addition, 0 deletionsnet/ipv4/netfilter/nf_nat_l3proto_ipv4.c
- net/ipv4/netfilter/nf_nat_snmp_basic_main.c 6 additions, 1 deletionnet/ipv4/netfilter/nf_nat_snmp_basic_main.c
- net/ipv6/netfilter/nf_nat_l3proto_ipv6.c 1 addition, 0 deletionsnet/ipv6/netfilter/nf_nat_l3proto_ipv6.c
Loading
Please register or sign in to comment