github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-07-27 09:36:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

xfrm: restrict netlink attributes for XFRM_MSG_MIGRATE_STATE

Browse Source 
Only accept XFRMA used in this method, reject the rest.

Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
This commit is contained in:
Antony Antony 2026-05-26 21:10:03 +02:00 committed by Steffen Klassert
parent a9d155ea9b
commit c4460171d7
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
net/xfrm/xfrm_user.c
View File

@ -3788,6 +3788,30 @@ static int xfrm_reject_unused_attr(int type, struct nlattr **attrs,
}
}
if (type == XFRM_MSG_MIGRATE_STATE) {
int i;
for (i = 0; i <= XFRMA_MAX; i++) {
if (!attrs[i])
continue;
switch (i) {
case XFRMA_MARK:
case XFRMA_ENCAP:
case XFRMA_OFFLOAD_DEV:
case XFRMA_SET_MARK:
case XFRMA_SET_MARK_MASK:
case XFRMA_MTIMER_THRESH:
case XFRMA_NAT_KEEPALIVE_INTERVAL:
break;
default:
NL_SET_ERR_MSG_ATTR(extack, attrs[i],
"Unsupported attribute in XFRM_MSG_MIGRATE_STATE");
return -EINVAL;
}
}
}
return 0;
}