[PATCH 1/2] [XFRM] Prevent off-by-one access to xfrm_dispatch

[Thomas Graf <tgraf@xxxxxxx>]

Makes the type > XFRM_MSG_MAX check behave correctly to
protect access to xfrm_dispatch.

Signed-off-by: Thomas Graf <tgraf@xxxxxxx>

--- linux-2.6.12-rc3.orig/include/linux/xfrm.h  2005-04-30 20:22:19.000000000 
+0200
+++ linux-2.6.12-rc3/include/linux/xfrm.h       2005-05-01 11:53:30.000000000 
+0200
@@ -140,8 +140,9 @@
        XFRM_MSG_FLUSHPOLICY,
 #define XFRM_MSG_FLUSHPOLICY XFRM_MSG_FLUSHPOLICY
 
-       XFRM_MSG_MAX
+       __XFRM_MSG_MAX
 };
+#define XFRM_MSG_MAX (__XFRM_MSG_MAX - 1)
 
 struct xfrm_user_tmpl {
        struct xfrm_id          id;