From: Florian Westphal <fw@strlen.de>
Date: Tue, 22 Mar 2016 17:02:50 +0000 (+0100)
Subject: netfilter: x_tables: make sure e->next_offset covers remaining blob size
X-Git-Tag: v3.2.80~37
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b8cea33c6279e43cf0a222f3709f54e7d7c5a9be;p=pandora-kernel.git

netfilter: x_tables: make sure e->next_offset covers remaining blob size

commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91 upstream.

Otherwise this function may read data beyond the ruleset blob.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---

Reading git-diff-tree failed