* [PATCH 1/2] [XFRM] Prevent off-by-one access to xfrm_dispatch
@ 2005-05-01 18:47 Thomas Graf
2005-05-03 21:25 ` David S. Miller
0 siblings, 1 reply; 2+ messages in thread
From: Thomas Graf @ 2005-05-01 18:47 UTC (permalink / raw)
To: David S. Miller; +Cc: netdev
Makes the type > XFRM_MSG_MAX check behave correctly to
protect access to xfrm_dispatch.
Signed-off-by: Thomas Graf <tgraf@suug.ch>
--- linux-2.6.12-rc3.orig/include/linux/xfrm.h 2005-04-30 20:22:19.000000000 +0200
+++ linux-2.6.12-rc3/include/linux/xfrm.h 2005-05-01 11:53:30.000000000 +0200
@@ -140,8 +140,9 @@
XFRM_MSG_FLUSHPOLICY,
#define XFRM_MSG_FLUSHPOLICY XFRM_MSG_FLUSHPOLICY
- XFRM_MSG_MAX
+ __XFRM_MSG_MAX
};
+#define XFRM_MSG_MAX (__XFRM_MSG_MAX - 1)
struct xfrm_user_tmpl {
struct xfrm_id id;
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-05-03 21:25 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-05-01 18:47 [PATCH 1/2] [XFRM] Prevent off-by-one access to xfrm_dispatch Thomas Graf
2005-05-03 21:25 ` David S. Miller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).