Patrick McHardy 4889086969 netfilter: ip6t_eui: fix read outside array bounds ...

Use memcmp() instead of open coded comparison that reads one byte past
the intended end.

Based on patch from Roel Kluin <roel.kluin@gmail.com>

Signed-off-by: Patrick McHardy <kaber@trash.net>

2009-08-31 15:30:31 +02:00

..

ip6_queue.c

netfilter: queue: use NFPROTO_ for queue callsites

2009-05-08 10:30:46 +02:00

ip6_tables.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6t_ah.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_eui64.c

netfilter: ip6t_eui: fix read outside array bounds

2009-08-31 15:30:31 +02:00

ip6t_frag.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_hbh.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_ipv6header.c

netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE

2009-05-05 15:32:16 +02:00

ip6t_LOG.c

netfilter: use a linked list of loggers

2009-03-16 14:54:21 +01:00

ip6t_mh.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_REJECT.c

net: skb->dst accessors

2009-06-03 02:51:04 -07:00

ip6t_rt.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6table_filter.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_mangle.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_raw.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_security.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

Kconfig

netfilter: trivial Kconfig spelling fixes

2009-03-24 13:35:27 -07:00

Makefile

netfilter: Combine ipt_ttl and ip6t_hl source

2009-02-18 18:39:31 +01:00

nf_conntrack_l3proto_ipv6.c

netfilter: nf_conntrack: log packets dropped by helpers

2009-08-25 15:33:08 +02:00

nf_conntrack_proto_icmpv6.c

netfilter: nf_ct_icmp: keep the ICMP ct entries longer

2009-06-08 15:53:43 +02:00

nf_conntrack_reasm.c

netfilter: Use frag list abstraction interfaces.

2009-06-09 00:23:58 -07:00