Commit 526bdb80 authored May 03, 2005 by Thomas Graf Committed by David S. Miller May 03, 2005

[XFRM]: Prevent off-by-one access to xfrm_dispatch



Makes the type > XFRM_MSG_MAX check behave correctly to
protect access to xfrm_dispatch.

Signed-off-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent e4553edd

include/linux/xfrm.h

+2 −1

Original line number	Diff line number	Diff line
		@@ -140,8 +140,9 @@ enum {
		XFRM_MSG_FLUSHPOLICY,
		#define XFRM_MSG_FLUSHPOLICY XFRM_MSG_FLUSHPOLICY

		XFRM_MSG_MAX
		__XFRM_MSG_MAX
		};
		#define XFRM_MSG_MAX (__XFRM_MSG_MAX - 1)

		struct xfrm_user_tmpl {
		struct xfrm_id id;