mirror of
https://github.com/torvalds/linux.git
synced 2026-03-15 09:36:14 +01:00
The sadb_x_sec_len is stored in the unit 'byte divided by eight'.
So we have to multiply this value by eight before we can do
size checks. Otherwise we may get a slab-out-of-bounds when
we memcpy the user sec_ctx.
Fixes:
|
||
|---|---|---|
| .. | ||
| af_key.c | ||
| Makefile | ||