netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH ipsec-next] pfkey: fix SADB_X_EXT_FILTER length check
       [not found] <20140220100735.GA25752@elgon.mountain>
@ 2014-02-20 13:52 ` Nicolas Dichtel
  2014-02-21  6:51   ` Steffen Klassert
  0 siblings, 1 reply; 2+ messages in thread
From: Nicolas Dichtel @ 2014-02-20 13:52 UTC (permalink / raw)
  To: steffen.klassert, herbert, davem
  Cc: netdev, dan.carpenter, kbuild-all, Nicolas Dichtel

This patch fixes commit d3623099d350 ("ipsec: add support of limited SA dump").

sadb_ext_min_len array should be updated with the new type (SADB_X_EXT_FILTER).

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
---
 net/key/af_key.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/net/key/af_key.c b/net/key/af_key.c
index f0879c19f452..a50d979b5926 100644
--- a/net/key/af_key.c
+++ b/net/key/af_key.c
@@ -365,6 +365,7 @@ static const u8 sadb_ext_min_len[] = {
 	[SADB_X_EXT_NAT_T_OA]		= (u8) sizeof(struct sadb_address),
 	[SADB_X_EXT_SEC_CTX]		= (u8) sizeof(struct sadb_x_sec_ctx),
 	[SADB_X_EXT_KMADDRESS]		= (u8) sizeof(struct sadb_x_kmaddress),
+	[SADB_X_EXT_FILTER]		= (u8) sizeof(struct sadb_x_filter),
 };
 
 /* Verify sadb_address_{len,prefixlen} against sa_family.  */
-- 
1.8.5.4

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [PATCH ipsec-next] pfkey: fix SADB_X_EXT_FILTER length check
  2014-02-20 13:52 ` [PATCH ipsec-next] pfkey: fix SADB_X_EXT_FILTER length check Nicolas Dichtel
@ 2014-02-21  6:51   ` Steffen Klassert
  0 siblings, 0 replies; 2+ messages in thread
From: Steffen Klassert @ 2014-02-21  6:51 UTC (permalink / raw)
  To: Nicolas Dichtel; +Cc: herbert, davem, netdev, dan.carpenter, kbuild-all

On Thu, Feb 20, 2014 at 02:52:41PM +0100, Nicolas Dichtel wrote:
> This patch fixes commit d3623099d350 ("ipsec: add support of limited SA dump").
> 
> sadb_ext_min_len array should be updated with the new type (SADB_X_EXT_FILTER).
> 
> Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
> Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>

Thanks for the quick fix, applied to ipsec-next.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2014-02-21  6:51 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
     [not found] <20140220100735.GA25752@elgon.mountain>
2014-02-20 13:52 ` [PATCH ipsec-next] pfkey: fix SADB_X_EXT_FILTER length check Nicolas Dichtel
2014-02-21  6:51   ` Steffen Klassert

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).