Dan Carpenter
f674e72ff1
net/key/af_key.c: add range checks on ->sadb_x_policy_len ...
Because sizeof() is size_t then if "len" is negative, it counts as a
large positive value.
The call tree looks like:
pfkey_sendmsg()
-> pfkey_process()
-> pfkey_spdadd()
-> parse_ipsecrequests()
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-10-01 17:15:06 -04:00
2012-07-10 23:13:45 -07:00
2012-08-24 13:46:39 -04:00
2012-08-14 21:48:06 -07:00
2012-08-31 16:14:33 -04:00
2012-08-14 21:49:42 -07:00
2012-09-28 14:40:49 -04:00
2012-09-30 02:30:16 -04:00
2012-09-19 16:35:22 -04:00
2012-09-10 16:13:31 -04:00
2012-09-10 15:30:41 -04:00
2012-09-21 20:49:26 -07:00
2012-10-01 17:01:46 -04:00
2012-09-10 15:30:41 -04:00
2012-08-15 21:36:31 -07:00
2012-09-10 15:30:41 -04:00
2012-07-19 10:48:00 -07:00
2012-09-18 16:08:19 -04:00
2012-10-01 17:01:57 -04:00
2012-10-01 17:00:27 -04:00
2012-08-14 21:48:06 -07:00
2012-09-10 15:30:41 -04:00
2012-10-01 17:15:06 -04:00
2012-09-28 14:40:49 -04:00
2012-09-17 13:13:24 -04:00
2012-09-21 16:14:14 +02:00
2012-07-12 07:54:45 -07:00
2012-09-28 14:40:49 -04:00
2012-09-10 15:30:41 -04:00
2012-09-10 15:30:41 -04:00
2012-09-21 13:58:08 -04:00
2012-09-28 11:11:16 -04:00
2012-09-18 16:08:19 -04:00
2012-09-10 15:30:41 -04:00
2012-09-10 15:30:41 -04:00
2012-08-22 22:52:04 -07:00
2012-09-24 10:35:54 +02:00
2012-07-10 23:56:33 -07:00
2012-09-28 14:40:49 -04:00
2012-09-15 11:43:53 -04:00
2012-09-13 09:04:13 +08:00
2012-09-18 16:08:19 -04:00
2012-09-17 13:00:13 -04:00
2012-07-24 13:55:21 -07:00
2012-09-30 02:30:16 -04:00
2012-07-10 23:13:45 -07:00
2012-09-28 14:40:49 -04:00
2012-07-22 17:50:49 -07:00
2012-09-04 14:20:14 -04:00
2012-09-27 18:42:00 -04:00
f674e72ff1