anonfunc/xtables-addons
1
0
Fork 0
mirror of git://git.code.sf.net/p/xtables-addons/xtables-addons synced 2025-09-06 04:35:12 +02:00
Code Issues Releases Wiki Activity
Files
4dcefe4b9520bc53dbd961e7d5e19a6f8c72c268
xtables-addons/extensions
History
Jan Engelhardt 4dcefe4b95 xt_geoip: fix possible out-of-bounds access 
It is possible for geoip_bsearch() to pick mid == sizeof(subnets).

Consider a set with a single entry and a "address to test"
higher than the range:

1st call: lo = 0, hi = 1 -> mid will be 0
2nd call: lo = 1, hi = 1 -> mid will be 1

On the 2nd call, we'll examine random data.

Reported-by: Florian Westphal <fw@strlen.de>
2010-06-13 10:40:07 +02:00
..
ACCOUNT
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
ipset
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
pknock
compat_xtables: move to 2.6.35 xt_action_param (3/3)
2010-05-13 19:45:56 +02:00
.gitignore
Update .gitignore files
2009-09-26 00:13:15 +02:00
compat_nfinetaddr.h
Add a compat wrapper to make modules work with older Linux.
2008-01-29 15:40:57 +01:00
compat_rawpost.h
RAWNAT: add the rawpost tables for IPv4/IPv6
2009-04-11 00:35:58 +02:00
compat_skbuff.h
Rename skb->iif to skb->skb_iif for 2.6.32+
2009-12-31 16:15:53 +01:00
compat_xtables.c
compat_xtables: more 2.6.35 support
2010-05-14 11:51:34 +02:00
compat_xtables.h
compat_xtables: move to 2.6.35 API for matches
2010-04-05 00:43:47 +02:00
compat_xtnu.h
compat_xtables: move to 2.6.35 xt_action_param (3/3)
2010-05-13 19:45:56 +02:00
ip6table_rawpost.c
RAWNAT: make iptable_rawpost compile with 2.6.30-rc5
2009-05-15 18:35:53 +02:00
iptable_rawpost.c
RAWNAT: make iptable_rawpost compile with 2.6.30-rc5
2009-05-15 18:35:53 +02:00
Kbuild
RAWNAT: do not build ip6table_rawpost if IPv6 is not enabled
2010-02-24 00:31:48 +01:00
libxt_CHAOS.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_CHAOS.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_condition.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_condition.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_DELUDE.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_DELUDE.man
Import Chaostables extensions
2008-02-21 18:56:21 +01:00
libxt_dhcpmac.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_DHCPMAC.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_dhcpmac.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_DHCPMAC.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_ECHO.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_ECHO.man
doc: add manpages for xt_ECHO and xt_TEE
2008-11-24 17:42:32 +01:00
libxt_fuzzy.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_fuzzy.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_geoip.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_geoip.man
geoip: use /usr/share/xt_geoip instead of /var/geoip
2009-12-31 16:37:42 +01:00
libxt_iface.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_iface.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_IPMARK.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_IPMARK.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_ipp2p.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_ipp2p.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_ipv4options.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_ipv4options.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_length2.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_length.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_LOGMARK.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_LOGMARK.man
LOGMARK: remove non-existent options from manpage
2009-10-24 01:14:20 +02:00
libxt_lscan.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_lscan.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_psd.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_psd.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_quota2.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_quota2.man
quota2: add a no-change mode
2009-12-31 16:24:47 +01:00
libxt_RAWDNAT.c
RAWNAT: IPv6 variants erroneously rejected masks /33-/128
2010-06-12 09:23:59 +02:00
libxt_RAWDNAT.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_RAWSNAT.c
RAWNAT: IPv6 variants erroneously rejected masks /33-/128
2010-06-12 09:23:59 +02:00
libxt_RAWSNAT.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_STEAL.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_STEAL.man
Add the "STEAL" target from the "demos" branch
2009-03-25 19:54:25 +01:00
libxt_SYSRQ.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_SYSRQ.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_TARPIT.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_TARPIT.man
doc: properly escape non-hyphens
2009-10-03 21:41:29 +02:00
libxt_TEE.c
extensions: replace AF/PF with NFPROTO
2010-03-17 02:20:39 +01:00
libxt_TEE.man
doc: add example usage to libxt_TEE.man
2009-11-25 11:46:39 +01:00
mac.c
Upgrade to iptables 1.4.3 API
2009-03-19 11:05:26 +01:00
Makefile.am
build: do not print enter/exit during banner
2010-04-05 02:22:49 +02:00
Mbuild
pknock: move into separate directory
2009-10-09 17:50:05 +02:00
xt_CHAOS.c
compat_xtables: more 2.6.35 support
2010-05-14 11:51:34 +02:00
xt_CHAOS.h
Import Chaostables extensions
2008-02-21 18:56:21 +01:00
xt_CHAOS.Kconfig
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
xt_condition.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_condition.h
condition: greatly improve processing speed
2008-04-08 11:58:35 +02:00
xt_condition.Kconfig
condition: import 20080125 code base
2008-04-08 11:58:33 +02:00
xt_DELUDE.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_DELUDE.Kconfig
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
xt_DHCPMAC.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_DHCPMAC.h
dhcpmac: rename from dhcpaddr
2009-03-26 21:55:10 +01:00
xt_DHCPMAC.Kconfig
dhcpmac: rename from dhcpaddr
2009-03-26 21:55:10 +01:00
xt_ECHO.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_ECHO.Kconfig
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
xt_fuzzy.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_fuzzy.h
fuzzy: import 20050627 code base
2008-09-01 15:22:16 -04:00
xt_fuzzy.Kconfig
fuzzy: import 20050627 code base
2008-09-01 15:22:16 -04:00
xt_geoip.c
xt_geoip: fix possible out-of-bounds access
2010-06-13 10:40:07 +02:00
xt_geoip.h
geoip: minor cleanups in help, opts and logic
2008-03-22 03:59:58 +01:00
xt_geoip.Kconfig
Add Kconfig descriptions for Chaostables, ECHO, geoip
2008-03-24 16:28:14 +01:00
xt_iface.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_iface.h
iface: must use __u types in header files
2009-04-27 20:46:25 +02:00
xt_IPMARK.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_IPMARK.h
IPMARK: IPv6 support
2008-04-09 19:24:01 +02:00
xt_IPMARK.Kconfig
IPMARK: import 20080304 code base
2008-04-08 20:37:59 +02:00
xt_ipp2p.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_ipp2p.h
ipp2p: version bump
2009-01-30 06:02:10 +01:00
xt_ipp2p.Kconfig
ipp2p: import 20080304 code base
2008-04-08 20:34:03 +02:00
xt_ipv4options.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_ipv4options.h
Add a reworked IPv4 options match - xt_ipv4options
2009-03-08 23:38:12 +01:00
xt_ipv4options.Kconfig
desc: add informational Kconfig descriptions
2009-03-26 21:32:44 +01:00
xt_length2.c
compat_xtables: move to 2.6.35 xt_action_param (3/3)
2010-05-13 19:45:56 +02:00
xt_length2.h
Add xt_length2
2009-01-30 06:01:12 +01:00
xt_length2.Kconfig
desc: add informational Kconfig descriptions
2009-03-26 21:32:44 +01:00
xt_LOGMARK.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_LOGMARK.h
xt_LOGMARK: dump CLASSIFY mark, ctstate and ctstatus
2008-02-20 23:17:55 +01:00
xt_LOGMARK.Kconfig
Add xt_LOGMARK (nfmark, ctmark, secmark logger)
2008-01-30 13:54:57 +01:00
xt_lscan.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_lscan.h
xt_lscan: rename from xt_portscan
2009-03-05 01:43:29 +01:00
xt_lscan.Kconfig
xt_lscan: rename from xt_portscan
2009-03-05 01:43:29 +01:00
xt_psd.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_psd.h
psd: use fixated types in info struct
2009-08-13 00:52:46 +02:00
xt_psd.Kconfig
psd: import 20090807 code base
2009-08-12 21:59:33 +02:00
xt_quota2.c
compat_xtables: move to 2.6.35 xt_action_param (2/3)
2010-05-13 19:45:52 +02:00
xt_quota2.h
quota2: add a no-change mode
2009-12-31 16:24:47 +01:00
xt_quota2.Kconfig
quota2: add a no-change mode
2009-12-31 16:24:47 +01:00
xt_RAWNAT.c
RAWNAT: fix incorrect mask in rawnat_ipv6_mask
2010-05-29 12:35:14 +02:00
xt_RAWNAT.h
RAWNAT: add extension's kernel and userspace modules
2009-04-26 21:44:54 +02:00
xt_RAWNAT.Kconfig
RAWNAT: add extension's kernel and userspace modules
2009-04-26 21:44:54 +02:00
xt_STEAL.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_SYSRQ.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_SYSRQ.Kconfig
SYSRQ target
2008-08-03 12:26:09 -04:00
xt_TARPIT.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_TARPIT.Kconfig
Initial commit.
2008-01-29 03:57:08 +01:00
xt_TEE.c
compat_xtables: move to 2.6.35 xt_action_param (1/3)
2010-05-13 19:28:37 +02:00
xt_TEE.h
Initial commit.
2008-01-29 03:57:08 +01:00
xt_TEE.Kconfig
Initial commit.
2008-01-29 03:57:08 +01:00