git.openpandora.org
/
pandora-kernel.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
[pandora-kernel.git]
/
net
/
key
/
af_key.c
diff --git
a/net/key/af_key.c
b/net/key/af_key.c
index
1b19d6a
..
cb3c1c4
100644
(file)
--- a/
net/key/af_key.c
+++ b/
net/key/af_key.c
@@
-3230,7
+3230,7
@@
static struct xfrm_policy *pfkey_compile_policy(struct sock *sk, int opt,
p += pol->sadb_x_policy_len*8;
sec_ctx = (struct sadb_x_sec_ctx *)p;
if (len < pol->sadb_x_policy_len*8 +
- sec_ctx->sadb_x_sec_len) {
+ sec_ctx->sadb_x_sec_len
*8
) {
*dir = -EINVAL;
goto out;
}