X-Git-Url: https://git.archive.openwrt.org/?a=blobdiff_plain;f=target%2Flinux%2Fgeneric%2Fpatches-3.14%2F610-netfilter_match_bypass_default_checks.patch;h=f652dafd188b2e41f26d7a84f73444b7abac1018;hb=8a60d2a123bbac3fb02e202cec93067c23460412;hp=358d64b1a17e8ed10b61fec068a640d58cb6540c;hpb=eac9174b89e3790ac4238ce14723eb61130562f7;p=openwrt.git diff --git a/target/linux/generic/patches-3.14/610-netfilter_match_bypass_default_checks.patch b/target/linux/generic/patches-3.14/610-netfilter_match_bypass_default_checks.patch index 358d64b1a1..f652dafd18 100644 --- a/target/linux/generic/patches-3.14/610-netfilter_match_bypass_default_checks.patch +++ b/target/linux/generic/patches-3.14/610-netfilter_match_bypass_default_checks.patch @@ -76,11 +76,10 @@ counters = alloc_counters(table); if (IS_ERR(counters)) -@@ -965,6 +994,14 @@ copy_entries_to_user(unsigned int total_ - ret = -EFAULT; +@@ -966,6 +995,14 @@ copy_entries_to_user(unsigned int total_ goto free_counters; } -+ + + flags = e->ip.flags & IPT_F_MASK; + if (copy_to_user(userptr + off + + offsetof(struct ipt_entry, ip.flags), @@ -88,6 +87,7 @@ + ret = -EFAULT; + goto free_counters; + } - ++ for (i = sizeof(struct ipt_entry); i < e->target_offset; + i += m->u.match_size) {