Messages in this thread | | | Date | Tue, 20 Mar 2018 13:37:06 +0100 | From | Pablo Neira Ayuso <> | Subject | Re: [PATCH v2] netfilter: nf_tables: remove VLA usage |
| |
On Mon, Mar 12, 2018 at 10:16:17PM -0500, Gustavo A. R. Silva wrote: > In preparation to enabling -Wvla, remove VLA and replace it > with dynamic memory allocation. > > From a security viewpoint, the use of Variable Length Arrays can be > a vector for stack overflow attacks. Also, in general, as the code > evolves it is easy to lose track of how big a VLA can get. Thus, we > can end up having segfaults that are hard to debug. > > Also, fixed as part of the directive to remove all VLAs from > the kernel: https://lkml.org/lkml/2018/3/7/621
Applied, thanks.
| |