diff options
author | Steffen Klassert <steffen.klassert@secunet.com> | 2013-09-09 11:39:01 +0400 |
---|---|---|
committer | Steffen Klassert <steffen.klassert@secunet.com> | 2013-09-16 11:39:37 +0400 |
commit | 4479ff76c43607b680f9349128d8493228b49dce (patch) | |
tree | 5144879a8baaa977847276d0c4758cd8f2735bce /net/ipv6/xfrm6_policy.c | |
parent | 73a695f8572e4c46a2aecdbb63f26f36a43e6873 (diff) | |
download | linux-4479ff76c43607b680f9349128d8493228b49dce.tar.xz |
xfrm: Fix replay size checking on async events
We pass the wrong netlink attribute to xfrm_replay_verify_len().
It should be XFRMA_REPLAY_ESN_VAL and not XFRMA_REPLAY_VAL as
we currently doing. This causes memory corruptions if the
replay esn attribute has incorrect length. Fix this by passing
the right attribute to xfrm_replay_verify_len().
Reported-by: Michael Rossberg <michael.rossberg@tu-ilmenau.de>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'net/ipv6/xfrm6_policy.c')
0 files changed, 0 insertions, 0 deletions