Unverified Commit 1a70035e authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14640 xfrm: validate new SA's prefixlen using SA family when sel.family is unset 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/JLRNQG2J6F53COL5FBGYCYOADNMWT2XZ/ 
 
https://gitee.com/src-openeuler/kernel/issues/IB2SWP 
 
Link:https://gitee.com/openeuler/kernel/pulls/14640
parents 8a356e6a 659612e1

net/xfrm/xfrm_user.c

+5 −1
Original line number Diff line number Diff line
@@ -148,6 +148,7 @@ static int verify_newsa_info(struct xfrm_usersa_info *p, 
			     struct nlattr **attrs)

{

	int err;

	u16 family = p->sel.family;



	err = -EINVAL;

	switch (p->family) {
@@ -166,7 +167,10 @@ static int verify_newsa_info(struct xfrm_usersa_info *p, 
		goto out;

	}



	switch (p->sel.family) {

	if (!family && !(p->flags & XFRM_STATE_AF_UNSPEC))

		family = p->family;



	switch (family) {

	case AF_UNSPEC:

		break;