From: Steffen Klassert <steffen.klassert@secunet.com>
Date: Mon, 9 Sep 2013 07:39:01 +0000 (+0200)
Subject: xfrm: Fix replay size checking on async events
X-Git-Tag: v3.12-rc7~20^2~46^2~6
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4479ff76c43607b680f9349128d8493228b49dce;p=pandora-kernel.git

xfrm: Fix replay size checking on async events

We pass the wrong netlink attribute to xfrm_replay_verify_len().
It should be XFRMA_REPLAY_ESN_VAL and not XFRMA_REPLAY_VAL as
we currently doing. This causes memory corruptions if the
replay esn attribute has incorrect length. Fix this by passing
the right attribute to xfrm_replay_verify_len().

Reported-by: Michael Rossberg <michael.rossberg@tu-ilmenau.de>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
---

Reading git-diff-tree failed