Commit c984be1a authored by Lin Ma's avatar Lin Ma Committed by Yongqiang Liu
Browse files

net: af_key: fix sadb_x_filter validation

stable inclusion
from stable-v4.19.293
commit 843bcd3fa6bd6b0a3c323030c5a67eb26a9bfb90
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I85XNK


CVE: NA

--------------------------------

[ Upstream commit 75065a89 ]

When running xfrm_state_walk_init(), the xfrm_address_filter being used
is okay to have a splen/dplen that equals to sizeof(xfrm_address_t)<<3.
This commit replaces >= to > to make sure the boundary checking is
correct.

Fixes: 37bd2242 ("af_key: pfkey_dump needs parameter validation")
Signed-off-by: default avatarLin Ma <linma@zju.edu.cn>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarYongqiang Liu <liuyongqiang13@huawei.com>
parent 5a3ba092
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment