diff options
author | Leon Romanovsky <leonro@nvidia.com> | 2022-02-08 16:14:32 +0200 |
---|---|---|
committer | Steffen Klassert <steffen.klassert@secunet.com> | 2022-02-09 09:00:40 +0100 |
commit | 7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1 (patch) | |
tree | da1b014964e0874d908fae7ad53732d06281581d /drivers/net/ethernet/ibm/ibmvnic.c | |
parent | xfrm: fix the if_id check in changelink (diff) | |
download | linux-dev-7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1.tar.xz linux-dev-7c76ecd9c99b6e9a771d813ab1aa7fa428b3ade1.zip |
xfrm: enforce validity of offload input flags
struct xfrm_user_offload has flags variable that received user input,
but kernel didn't check if valid bits were provided. It caused a situation
where not sanitized input was forwarded directly to the drivers.
For example, XFRM_OFFLOAD_IPV6 define that was exposed, was used by
strongswan, but not implemented in the kernel at all.
As a solution, check and sanitize input flags to forward
XFRM_OFFLOAD_INBOUND to the drivers.
Fixes: d77e38e612a0 ("xfrm: Add an IPsec hardware offloading API")
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'drivers/net/ethernet/ibm/ibmvnic.c')
0 files changed, 0 insertions, 0 deletions