Commit c28e9304 authored by jamal's avatar jamal Committed by David S. Miller
Browse files

xfrm: validate attributes 



Some XFRM attributes were not going through basic validation.

Signed-off-by: default avatarJamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent d707204c

net/xfrm/xfrm_user.c

+4 −0
Original line number Diff line number Diff line
@@ -2054,6 +2054,10 @@ static const int xfrm_msg_min[XFRM_NR_MSGTYPES] = { 
#undef XMSGSIZE



static const struct nla_policy xfrma_policy[XFRMA_MAX+1] = {

	[XFRMA_SA]		= { .len = sizeof(struct xfrm_usersa_info)},

	[XFRMA_POLICY]		= { .len = sizeof(struct xfrm_userpolicy_info)},

	[XFRMA_LASTUSED]	= { .type = NLA_U64},

	[XFRMA_ALG_AUTH_TRUNC]	= { .len = sizeof(struct xfrm_algo_auth)},

	[XFRMA_ALG_AEAD]	= { .len = sizeof(struct xfrm_algo_aead) },

	[XFRMA_ALG_AUTH]	= { .len = sizeof(struct xfrm_algo) },

	[XFRMA_ALG_CRYPT]	= { .len = sizeof(struct xfrm_algo) },