user/sven/linux.git/drivers/net/netdevsim/ipsec.c, branch v4.19.27Linux Kernel
https://git.stealer.net/cgit.cgi/user/sven/linux.git/atom?h=v4.19.272018-07-02T11:35:33Znetdevsim: fix sa_idx out of bounds check2018-07-02T11:35:33ZColin Ian Kingcolin.king@canonical.com2018-06-30T20:39:24Zurn:sha1:c02462d8a3e96d99967fb26fca7375d449328ce6
Currently if sa_idx is equal to NSIM_IPSEC_MAX_SA_COUNT then
an out-of-bounds read on ipsec->sa will occur. Fix the
incorrect bounds check by using >= rather than >.
Detected by CoverityScan, CID#1470226 ("Out-of-bounds-read")
Fixes: 7699353da875 ("netdevsim: add ipsec offload testing")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Shannon Nelson <shannon.nelson@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netdevsim: add ipsec offload testing2018-06-28T07:10:08ZShannon Nelsonshannon.nelson@oracle.com2018-06-26T17:07:54Zurn:sha1:7699353da875c2ae0d87a4f5a995c144115b31bb
Implement the IPsec/XFRM offload API for testing.
Signed-off-by: Shannon Nelson <shannon.nelson@oracle.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>