diff options
| author | Samuel Moelius <sam.moelius@trailofbits.com> | 2026-06-09 21:56:34 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-06-13 01:16:10 +0300 |
| commit | d504a978572202ef43ac5ecfec2030adda64b13e (patch) | |
| tree | d754c364c16629ae92c829f16afc8a62ac5db85c /tools/testing | |
| parent | f6033078a9e671e3c8b83d387b91591a6f6a54e7 (diff) | |
| download | linux-d504a978572202ef43ac5ecfec2030adda64b13e.tar.xz | |
net/sched: act_pedit: require matching IPv4 L4 protocol
The extended IPv4 L4 header mode in act_pedit can select TCP or UDP
header fields without confirming that the IPv4 protocol field matches
the selected transport header.
That lets a rule written for TCP or UDP modify unrelated payload bytes
in a packet carrying a different protocol.
Verify that the IPv4 header is long enough, that the protocol matches
the selected TCP or UDP header, and that the packet is not a non-initial
fragment before applying TCP or UDP extended header edits.
Cc: stable+noautosel@kernel.org # in real rule sets the match confirms this before calling the action
Signed-off-by: Samuel Moelius <sam.moelius@trailofbits.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/testing')
0 files changed, 0 insertions, 0 deletions