netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameter
authorPhil Turnbull <phil.turnbull@oracle.com>
Tue, 3 May 2016 20:39:19 +0000 (16:39 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 5 May 2016 14:47:08 +0000 (16:47 +0200)
commiteda3fc50daa93b08774a18d51883c5a5d8d85e15
treee3bc0a4fb353f4b65d4fcc8c0a29205c25e2d2d3
parentcec5913c1515e5619907016658838af4eff78dd3
netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameter

If a quota bit is set in NFACCT_FLAGS but the NFACCT_QUOTA parameter is
missing then a NULL pointer dereference is triggered. CAP_NET_ADMIN is
required to trigger the bug.

Signed-off-by: Phil Turnbull <phil.turnbull@oracle.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nfnetlink_acct.c