diff options
author | Gustavo A. R. Silva <gustavo@embeddedor.com> | 2018-03-12 22:16:17 -0500 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-03-20 13:41:39 +0100 |
commit | 5b4c6e3860daaf089c28e0161dffef7b5ad8000f (patch) | |
tree | 2d3b2876b1ba1481c5d3541bd482b0f2cfec0558 /net/bridge | |
parent | 1446385904add0e89f990ee0518434365e50ce86 (diff) | |
download | linux-5b4c6e3860daaf089c28e0161dffef7b5ad8000f.tar.gz |
netfilter: nf_tables: remove VLA usage
In preparation to enabling -Wvla, remove VLA and replace it with dynamic memory allocation. >From a security viewpoint, the use of Variable Length Arrays can be a vector for stack overflow attacks. Also, in general, as the code evolves it is easy to lose track of how big a VLA can get. Thus, we can end up having segfaults that are hard to debug. Also, fixed as part of the directive to remove all VLAs from the kernel: https://lkml.org/lkml/2018/3/7/621 Signed-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/bridge')
0 files changed, 0 insertions, 0 deletions