matthias
/
iproute2
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ip/xfrm: Fix deleteall when having many policies installed 

Fix "Policy buffer overflow" when trying to use deleteall with many
policies installed.

Signed-off-by: Alexander Heinlein <alexander.heinlein@secunet.com>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
This commit is contained in:
Alexander Heinlein 2017-01-16 14:48:25 +01:00 committed by Stephen Hemminger
parent c3d09fba93
commit d5eb0564da
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ip/xfrm_policy.c
View File

@ -732,10 +732,8 @@ static int xfrm_policy_keep(const struct sockaddr_nl *who,
if (!xfrm_policy_filter_match(xpinfo, ptype)) if (!xfrm_policy_filter_match(xpinfo, ptype))
return 0; return 0;
if (xb->offset > xb->size) { if (xb->offset + NLMSG_LENGTH(sizeof(*xpid)) > xb->size)
fprintf(stderr, "Policy buffer overflow\n"); return 0;
return -1;
}
new_n = (struct nlmsghdr *)(xb->buf + xb->offset); new_n = (struct nlmsghdr *)(xb->buf + xb->offset);
new_n->nlmsg_len = NLMSG_LENGTH(sizeof(*xpid)); new_n->nlmsg_len = NLMSG_LENGTH(sizeof(*xpid));