lkml.org 
[lkml]   [2020]   [Jul]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: af_key: pfkey_dump needs parameter validation
    On Tue, Jul 21, 2020 at 06:23:54AM -0700, Mark Salyzyn wrote:
    > In pfkey_dump() dplen and splen can both be specified to access the
    > xfrm_address_t structure out of bounds in__xfrm_state_filter_match()
    > when it calls addr_match() with the indexes. Return EINVAL if either
    > are out of range.
    >
    > Signed-off-by: Mark Salyzyn <salyzyn@android.com>
    > Cc: netdev@vger.kernel.org
    > Cc: linux-kernel@vger.kernel.org
    > Cc: kernel-team@android.com
    > ---
    > Should be back ported to the stable queues because this is a out of
    > bounds access.

    Please do a v2 and add a proper 'Fixes' tag if this is a fix that
    needs to be backported.

    Thanks!

    \
     
     \ /
      Last update: 2020-07-22 11:34    [W:2.143 / U:1.472 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site