mirror of
https://github.com/torvalds/linux.git
synced 2025-11-07 03:59:22 +02:00
The sadb_x_sec_len is stored in the unit 'byte divided by eight'.
So we have to multiply this value by eight before we can do
size checks. Otherwise we may get a slab-out-of-bounds when
we memcpy the user sec_ctx.
Fixes:
|
||
|---|---|---|
| .. | ||
| af_key.c | ||
| Makefile | ||