Messages in this thread | | | Date | Tue, 30 Nov 2021 22:49:42 +0100 | From | Pablo Neira Ayuso <> | Subject | Re: [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn |
| |
On Thu, Nov 18, 2021 at 12:31:13PM -0800, Kees Cook wrote: > In preparation for FORTIFY_SOURCE performing compile-time and run-time > field bounds checking for memset(), avoid intentionally writing across > neighboring fields. > > Use memset_startat() to avoid confusing memset() about writing beyond > the target struct member.
Applied to nf-next, thanks
| |