)]}'
{
  "commit": "e34ee4e0813a25030376d129bf66860775f1b9ce",
  "tree": "66c32a1504ef0f99a9ba9faa7aeb153051b3d99f",
  "parents": [
    "03687dad99da4824473608a78a34d1743bde2552"
  ],
  "author": {
    "name": "Ke Wu",
    "email": "mikewu@google.com",
    "time": "Fri Apr 16 04:00:10 2021 -0700"
  },
  "committer": {
    "name": "Arnav Kansal",
    "email": "rnv@google.com",
    "time": "Tue Apr 20 19:16:12 2021 +0000"
  },
  "message": "netfilter: x_tables: fix compat match/target pad out-of-bound write\n\nxt_compat_match/target_from_user doesn\u0027t check that zeroing the area\nto start of next rule won\u0027t write past end of allocated ruleset blob.\n\nRemove this code and zero the entire blob beforehand.\n\nReported-by: syzbot+cfc0247ac173f597aaaa@syzkaller.appspotmail.com\nReported-by: Andy Nguyen \u003ctheflow@google.com\u003e\nFixes: 9fa492cdc160c (\"[NETFILTER]: x_tables: simplify compat API\")\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n\nBUG\u003db/184972402\nTEST\u003dPresubmit test\nRELEASE_NOTE\u003dFixd an issue in kernel that netfilter/x_tables.c\nmay cause out-of-bound write\nSOURCE\u003dFROMLIST(https://patchwork.ozlabs.org/project/netfilter-devel/patch/20210407193857.21120-1-fw@strlen.de/)\ncos-patch: security-high\n\nChange-Id: I2752c7c9eb17d48790adb6cebd0a7824b2c9f414\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/15633\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Roy Yang \u003croyyang@google.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n(cherry picked from commit 51181ff36cdeac7c681812260e679768315f5897)\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/15792\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nTested-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a2cae543a285a215438034f8aa9709654575f37f",
      "old_mode": 33188,
      "old_path": "net/ipv4/netfilter/arp_tables.c",
      "new_id": "653d7879c3466366bb7c88b4fb1727f934140211",
      "new_mode": 33188,
      "new_path": "net/ipv4/netfilter/arp_tables.c"
    },
    {
      "type": "modify",
      "old_id": "6672172a7512d8b82ac131d0361e033de90276ab",
      "old_mode": 33188,
      "old_path": "net/ipv4/netfilter/ip_tables.c",
      "new_id": "10aff700d90069b0ac8d0c174a446f582c1876d2",
      "new_mode": 33188,
      "new_path": "net/ipv4/netfilter/ip_tables.c"
    },
    {
      "type": "modify",
      "old_id": "3b067d5a62ee06adf7966dd50f390fd72fe210f9",
      "old_mode": 33188,
      "old_path": "net/ipv6/netfilter/ip6_tables.c",
      "new_id": "2484c54a8379a1392c9774d17dc4c6d76f862718",
      "new_mode": 33188,
      "new_path": "net/ipv6/netfilter/ip6_tables.c"
    },
    {
      "type": "modify",
      "old_id": "6a7d0303d058f109fef46158b189fa29c33dd775",
      "old_mode": 33188,
      "old_path": "net/netfilter/x_tables.c",
      "new_id": "54039966432b674cb976c28c2bdf456ce0ee7297",
      "new_mode": 33188,
      "new_path": "net/netfilter/x_tables.c"
    }
  ]
}