From b565a85fb6e33ca79a0a3fc05bd66aa77d0d70d8 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sun, 23 Jul 2017 20:01:46 +0200 Subject: [PATCH] DNETMAP: fix write past end of buffer --- extensions/xt_DNETMAP.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/extensions/xt_DNETMAP.c b/extensions/xt_DNETMAP.c index 21bbab5..192f21d 100644 --- a/extensions/xt_DNETMAP.c +++ b/extensions/xt_DNETMAP.c @@ -398,7 +398,7 @@ dnetmap_tg(struct sk_buff *skb, const struct xt_action_param *par) /* if prefix is specified, we check if it matches lookedup entry */ if (tginfo->flags & XT_DNETMAP_PREFIX) - if (memcmp(mr, &e->prefix, sizeof(*mr))) + if (memcmp(mr, &e->prefix->prefix, sizeof(*mr))) goto no_rev_map; /* don't reset ttl if flag is set */ if (jttl >= 0 && (! (e->flags & XT_DNETMAP_STATIC) ) ) {