git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 862096a) | patch
net/key/af_key.c: add range checks on ->sadb_x_policy_len
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 27 Sep 2012 22:21:19 +0000 (22:21 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 1 Oct 2012 21:15:06 +0000 (17:15 -0400)
commitf674e72ff1aad23a99c7c205473cf02c85c2ac33
tree032274dd7d42c5feeb17fe8b944ce9709001e339tree | snapshot
parent862096a8bbf8f992f6d0a1a8786ffd3fc7437e48commit | diff
net/key/af_key.c: add range checks on ->sadb_x_policy_len

Because sizeof() is size_t then if "len" is negative, it counts as a
large positive value.

The call tree looks like:
pfkey_sendmsg()
-> pfkey_process()
   -> pfkey_spdadd()
      -> parse_ipsecrequests()

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/key/af_key.c diff | blob | history
Pandora Kernel Repository