[Bug 241010] netipsec: key_dup_keymsg bcopy too much bytes

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Oct 3 15:18:58 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=241010

--- Comment #3 from Jean-François Hren <jean-francois.hren at stormshield.eu> ---
(In reply to Andrey V. Elsukov from comment #2)
A check on sadb_key_bits can be done to ensure we are not going out-of-bound.
Breaking current installations should not be an issue since this length is used
later to set up encryption or authentication. If set incorrectly, not much
should be working.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-net mailing list