Dan Carpenter fbbd84af6b chelsio/chtls: prevent potential integer overflow on 32bit ...

The "gl->tot_len" variable is controlled by the user.  It comes from
process_responses().  On 32bit systems, the "gl->tot_len +
sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition
could have an integer wrapping bug.  Use size_add() to prevent this.

Fixes: a089439478 ("crypto: chtls - Register chtls with net tls")
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/c6bfb23c-2db2-4e1b-b8ab-ba3925c82ef5@stanley.mountain
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2024-12-16 18:08:11 -08:00

..

ch_ipsec

chelsio: Do not include crypto/algapi.h

2023-09-15 18:30:43 +08:00

ch_ktls

Revert "net: mirror skb frag ref/unref helpers"

2024-05-03 16:05:53 -07:00

chtls

chelsio/chtls: prevent potential integer overflow on 32bit

2024-12-16 18:08:11 -08:00

Kconfig

chcr_ktls: use AES library for single use cipher

2021-01-03 08:41:35 +11:00

Makefile

crypto/chcr: move nic TLS functionality to drivers/net

2020-09-11 17:26:39 -07:00