From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Thu, 27 Sep 2012 22:21:19 +0000 (+0000)
Subject: net/key/af_key.c: add range checks on ->sadb_x_policy_len
X-Git-Tag: omap-for-v3.7-rc1/fixes-cpufreq-signed~47^2~17
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f674e72ff1aad23a99c7c205473cf02c85c2ac33;p=pandora-kernel.git

net/key/af_key.c: add range checks on ->sadb_x_policy_len

Because sizeof() is size_t then if "len" is negative, it counts as a
large positive value.

The call tree looks like:
pfkey_sendmsg()
-> pfkey_process()
   -> pfkey_spdadd()
      -> parse_ipsecrequests()

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed