Messages in this thread | | | Date | Wed, 22 Jul 2020 11:33:18 +0200 | From | Steffen Klassert <> | Subject | Re: af_key: pfkey_dump needs parameter validation |
| |
On Tue, Jul 21, 2020 at 06:23:54AM -0700, Mark Salyzyn wrote: > In pfkey_dump() dplen and splen can both be specified to access the > xfrm_address_t structure out of bounds in__xfrm_state_filter_match() > when it calls addr_match() with the indexes. Return EINVAL if either > are out of range. > > Signed-off-by: Mark Salyzyn <salyzyn@android.com> > Cc: netdev@vger.kernel.org > Cc: linux-kernel@vger.kernel.org > Cc: kernel-team@android.com > --- > Should be back ported to the stable queues because this is a out of > bounds access.
Please do a v2 and add a proper 'Fixes' tag if this is a fix that needs to be backported.
Thanks!
| |