| commit | 4479ff76c43607b680f9349128d8493228b49dce | [log] [tgz] |
|---|---|---|
| author | Steffen Klassert <steffen.klassert@secunet.com> | Mon Sep 09 09:39:01 2013 +0200 |
| committer | Steffen Klassert <steffen.klassert@secunet.com> | Mon Sep 16 09:39:37 2013 +0200 |
| tree | 5144879a8baaa977847276d0c4758cd8f2735bce | |
| parent | 73a695f8572e4c46a2aecdbb63f26f36a43e6873 [diff] |
xfrm: Fix replay size checking on async events We pass the wrong netlink attribute to xfrm_replay_verify_len(). It should be XFRMA_REPLAY_ESN_VAL and not XFRMA_REPLAY_VAL as we currently doing. This causes memory corruptions if the replay esn attribute has incorrect length. Fix this by passing the right attribute to xfrm_replay_verify_len(). Reported-by: Michael Rossberg <michael.rossberg@tu-ilmenau.de> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>