refs/heads/testing - pub/scm/linux/kernel/git/klassert/ipsec-next.git

commit: 41c4d3b26f5e23609cd4b5ca561a399a097daabe
[log]
author: David Ahern <dahern@nvidia.com>
Wed May 13 10:50:24 2026 -0600
committer: Steffen Klassert <steffen.klassert@secunet.com>
Thu May 14 10:24:10 2026 +0200
tree: 133d547a707ddfd0cb3edb3de3bc2e5669d9abf2
parent: a77d172177f3754ebd70123c78c75a6efa9eec2a [diff]

xfrm: Reject excessive values for XFRMA_TFCPAD

tfcpad is a u32, but that full range is excessive for padding.
Limit it to max IP length (64k).

Signed-off-by: David Ahern <dahern@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

net/xfrm/xfrm_user.c[diff]

1 file changed

tree: 133d547a707ddfd0cb3edb3de3bc2e5669d9abf2