Subject: Re: [PATCH v2 net] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}

From: Florian Westphal <[email-masked]>
Date: Thu, 25 Jan 2018 07:09:38 +0100

Eric Dumazet <[email-masked]> wrote:
> From: Eric Dumazet <[email-masked]>
> 
> It looks like syzbot found its way into netfilter territory.
> 
> Issue here is that @name comes from user space and might
> not be null terminated.
> 
> Out-of-bound reads happen, KASAN is not happy.
> 
> v2 added similar fix for xt_request_find_target(),
> as Florian advised.
> 
> Signed-off-by: Eric Dumazet <[email-masked]>
> Reported-by: syzbot <[email-masked]>

Thanks a lot Eric!

Acked-by: Florian Westphal <[email-masked]>