From: Patrick McHardy Date: Mon, 14 Apr 2008 09:15:52 +0000 (+0200) Subject: [NETFILTER]: nf_conntrack_tcp: catch invalid state updates over ctnetlink X-Git-Tag: v2.6.26-rc1~1138^2~89^2~10 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5f7da4d26d421f3bdf10c3bbdb86ffc3a12a84f2;p=pandora-kernel.git [NETFILTER]: nf_conntrack_tcp: catch invalid state updates over ctnetlink Invalid states can cause out-of-bound memory accesses of the state table. Also don't insist on having a new state contained in the netlink message. Signed-off-by: Patrick McHardy --- Reading git-diff-tree failed