[PATCH] Trivial fix for out of bounds array access in xfrm4_policy

[PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check

To:	netdev@xxxxxxxxxxx
Subject:	[PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check
From:	"Catalin(ux aka Dino) BOIE" <util@xxxxxxxxxxxxxxx>
Date:	Tue, 7 Sep 2004 13:35:52 +0300 (EEST)
Cc:	linux-kernel@xxxxxxxxxxxxxxx
Sender:	netdev-bounce@xxxxxxxxxxx

Hello!

Coverity found a bug in accessing xfrm4_policy_check using XFRM_POLICY_FWD(=2) as index in sk->sk_policy.


sk->sk_policy[] is defined in sock.h as:

struct xfrm_policy *sk_policy[2];

Attached is the fix.

http://linuxbugs.coverity.com/external/editbugparent.php?viewbugid=2138&checkers%5B%5D=all&status%5B%5D=BUG&status%5B%5D=UNINSPECTED&status%5B%5D=UNKNOWN&status%5B%5D=DON%27T%20CARE&status%5B%5D=PENDING&product%5B%5D=all&component%5B%5D=all&file=&fn=&sortby=reverse_rank&before=&after=&curpage=2&bugid=-1&comment=&reason=

---
Catalin(ux aka Dino) BOIE
catab at deuroconsult.ro
http://kernel.umbrella.ro/

out-of-bounds-xfrm_policy.patch
Description: Text document

<Prev in Thread]	Current Thread	[Next in Thread>
[PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check, Catalin(ux aka Dino) BOIE <= Re: [PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check, Herbert Xu Re: [PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check, David S. Miller

Previous by Date:	Re: [PATCH 2.6] watch64: generic variable monitoring system, jamal
Next by Date:	Re: [PATCH] Do less atomic count changes in dev_queue_xmit, Andi Kleen
Previous by Thread:	[PATCH] mark mace and bmac as ppc32 only, Olaf Hering
Next by Thread:	Re: [PATCH] Trivial fix for out of bounds array access in xfrm4_policy_check, Herbert Xu
Indexes:	[Date] [Thread] [Top] [All Lists]