net: af_key: fix sadb_x_filter validation
authorLin Ma <linma@zju.edu.cn>
Tue, 27 Jun 2023 03:39:54 +0000 (11:39 +0800)
committerSteffen Klassert <steffen.klassert@secunet.com>
Thu, 29 Jun 2023 08:47:29 +0000 (10:47 +0200)
commit75065a8929069bc93181848818e23f147a73f83a
tree28468ce47f19cc1a2046df2efbf585ab8da897a2
parentdfa73c17d55b921e1d4e154976de35317e43a93a
net: af_key: fix sadb_x_filter validation

When running xfrm_state_walk_init(), the xfrm_address_filter being used
is okay to have a splen/dplen that equals to sizeof(xfrm_address_t)<<3.
This commit replaces >= to > to make sure the boundary checking is
correct.

Fixes: 37bd22420f85 ("af_key: pfkey_dump needs parameter validation")
Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/key/af_key.c