net: af_key: fix sadb_x_filter validation
stable inclusion from stable-v4.19.293 commit 843bcd3fa6bd6b0a3c323030c5a67eb26a9bfb90 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I85XNK CVE: NA -------------------------------- [ Upstream commit 75065a89 ] When running xfrm_state_walk_init(), the xfrm_address_filter being used is okay to have a splen/dplen that equals to sizeof(xfrm_address_t)<<3. This commit replaces >= to > to make sure the boundary checking is correct. Fixes: 37bd2242 ("af_key: pfkey_dump needs parameter validation") Signed-off-by:Lin Ma <linma@zju.edu.cn> Signed-off-by:
Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by:
Sasha Levin <sashal@kernel.org> Signed-off-by:
Yongqiang Liu <liuyongqiang13@huawei.com>
Loading
Please sign in to comment