-
Chen Gang authored
If nf_log uses ipt_ULOG as logging output, we can deliver non-null terminated strings to user-space since the maximum length of the prefix that is passed by nf_log is NF_LOG_PREFIXLEN but pm->prefix is 32 bytes long (ULOG_PREFIX_LEN). This is actually happening already from nf_conntrack_tcp if ipt_ULOG is used, since it is passing strings longer than 32 bytes. Signed-off-by:
Chen Gang <gang.chen@asianux.com> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org>
4f36ea6e