FreeBSD Bugzilla – Attachment 248900 Details for
Bug 277456
netipsec: kdebug_sadb invalid length check for sadb_ext_len
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch
kdebug_sadb.diff (text/plain), 600 bytes, created by
Tobias Heider
on 2024-03-03 16:30:20 UTC
(
hide
)
Description:
Patch
Filename:
MIME Type:
Creator:
Tobias Heider
Created:
2024-03-03 16:30:20 UTC
Size:
600 bytes
patch
obsolete
>diff --git a/sys/netipsec/key_debug.c b/sys/netipsec/key_debug.c >index dcb542b22ad8..17222ed9a60a 100644 >--- a/sys/netipsec/key_debug.c >+++ b/sys/netipsec/key_debug.c >@@ -193,9 +193,9 @@ kdebug_sadb(struct sadb_msg *base) > printf("%s: invalid ext_len=0 was passed.\n", __func__); > return; > } >- if (ext->sadb_ext_len > tlen) { >- printf("%s: ext_len too big (%u > %u).\n", >- __func__, ext->sadb_ext_len, tlen); >+ if (PFKEY_UNUNIT64(ext->sadb_ext_len) > tlen) { >+ printf("%s: ext_len too big (%u > %u).\n", __func__, >+ PFKEY_UNUNIT64(ext->sadb_ext_len), tlen); > return; > } >
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=248900">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 277456
:
248900
|
248911