Andy Whitcroft 22c9e7c092 xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder ... commit f843ee6dd019bcece3e74e76ad9df0155655d0df upstream. Kees Cook has pointed out that xfrm_replay_state_esn_len() is subject to wrapping issues. To ensure we are correctly ensuring that the two ESN structures are the same size compare both the overall size as reported by xfrm_replay_state_esn_len() and the internal length are the same. CVE-2017-7184 Signed-off-by: Andy Whitcroft <apw@canonical.com> Acked-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-03-31 09:49:52 +02:00
..
Kconfig	net/xfrm: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:40:03 -08:00
Makefile
xfrm_algo.c	ipsec: Replace seqniv with seqiv	2015-08-17 16:53:42 +08:00
xfrm_hash.c
xfrm_hash.h	xfrm: hash prefixed policies based on preflen thresholds	2014-09-02 13:29:44 +02:00
xfrm_input.c	xfrm: Fix crash observed during device unregistration and decryption	2016-04-20 15:42:05 +09:00
xfrm_ipcomp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-11-04 13:48:30 -05:00
xfrm_output.c	net: preserve IP control block during GSO segmentation	2016-01-31 11:29:00 -08:00
xfrm_policy.c	xfrm: policy: init locks early	2017-03-31 09:49:52 +02:00
xfrm_proc.c	net: clean up snmp stats code	2014-05-07 16:06:05 -04:00
xfrm_replay.c	xfrm: Always zero high-order sequence number bits	2015-05-21 06:56:23 +02:00
xfrm_state.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-06-01 22:51:30 -07:00
xfrm_sysctl.c
xfrm_user.c	xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder	2017-03-31 09:49:52 +02:00