| To: | herbert@xxxxxxxxxxxxxxxxxxx |
|---|---|
| Subject: | Re: [IPSEC] Fixed alg_key_len usage in attach_one_algo |
| From: | "David S. Miller" <davem@xxxxxxxxxxxxx> |
| Date: | Thu, 19 May 2005 12:40:15 -0700 (PDT) |
| Cc: | netdev@xxxxxxxxxxx |
| In-reply-to: | <20050519020302.GA20285@xxxxxxxxxxxxxxxxxxx> |
| References: | <20050519020302.GA20285@xxxxxxxxxxxxxxxxxxx> |
| Sender: | netdev-bounce@xxxxxxxxxxx |
From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Date: Thu, 19 May 2005 12:03:02 +1000 > This bug was discovered by a Linux box running in a remote corner > of Australia :) Hehe :-) > The variable alg_key_len is in bits and not bytes. The function > attach_one_algo is currently using it as if it were in bytes. > This causes it to read memory which may not be there. > > Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Applied, thanks Herbert. |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [IPV4/IPV6] Keep wmem accounting separate in ip*_push_pending_frames, David S. Miller |
|---|---|
| Next by Date: | Re: [IPSEC] Verify key payload in verify_one_algo, David S. Miller |
| Previous by Thread: | Re: [IPSEC] Verify key payload in verify_one_algo, Herbert Xu |
| Next by Thread: | Fw: 2.6.12-rc4-mm[12] - ULOG problem, Andrew Morton |
| Indexes: | [Date] [Thread] [Top] [All Lists] |