Re: [PATCH] af_key: fix buffer overread in verify_address_len()

2017-12-30 Thread Steffen Klassert
On Fri, Dec 29, 2017 at 06:13:05PM -0600, Eric Biggers wrote: > From: Eric Biggers > > If a message sent to a PF_KEY socket ended with one of the extensions > that takes a 'struct sadb_address' but there were not enough bytes > remaining in the message for the ->sa_family

[PATCH] af_key: fix buffer overread in verify_address_len()

2017-12-29 Thread Eric Biggers
From: Eric Biggers If a message sent to a PF_KEY socket ended with one of the extensions that takes a 'struct sadb_address' but there were not enough bytes remaining in the message for the ->sa_family member of the 'struct sockaddr' which is supposed to follow, then