Messages in this thread | | | Date | Wed, 25 Apr 2018 16:58:52 +0200 | From | Stefano Brivio <> | Subject | Re: [PATCH v4 ipsec-next] xfrm: remove VLA usage in __xfrm6_sort() |
| |
On Wed, 25 Apr 2018 07:46:39 -0700 Kees Cook <keescook@chromium.org> wrote:
> In the quest to remove all stack VLA usage removed from the kernel[1], > just use XFRM_MAX_DEPTH as already done for the "class" array. In one > case, it'll do this loop up to 5, the other caller up to 6. > > [1] https://lkml.org/lkml/2018/3/7/621 > > Co-developed-by: Andreas Christoforou <andreaschristofo@gmail.com> > Signed-off-by: Kees Cook <keescook@chromium.org> > --- > v4: > - actually remove memset(). :) > v3: > - adjust Subject and commit log (Steffen) > - use "= { }" instead of memset() (Stefano) > v2: > - use XFRM_MAX_DEPTH for "count" array (Steffen and Mathias). > ---
Acked-by: Stefano Brivio <sbrivio@redhat.com>
| |