Re: [PATCH net] xfrm: validate template mode

2018-09-24 Thread Steffen Klassert
On Wed, Sep 19, 2018 at 01:54:56PM -0600, Sean Tranchetti wrote: > XFRM mode parameters passed as part of the user templates > in the IP_XFRM_POLICY are never properly validated. Passing > values other than valid XFRM modes can cause stack-out-of-bounds > reads to occur later in the XFRM processing

[PATCH net] xfrm: validate template mode

2018-09-19 Thread Sean Tranchetti
XFRM mode parameters passed as part of the user templates in the IP_XFRM_POLICY are never properly validated. Passing values other than valid XFRM modes can cause stack-out-of-bounds reads to occur later in the XFRM processing: [ 140.535608] ===