Dan Carpenter fbbd84af6b chelsio/chtls: prevent potential integer overflow on 32bit ... The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this. Fixes: a089439478 ("crypto: chtls - Register chtls with net tls") Cc: stable@vger.kernel.org Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Reviewed-by: Simon Horman <horms@kernel.org> Link: https://patch.msgid.link/c6bfb23c-2db2-4e1b-b8ab-ba3925c82ef5@stanley.mountain Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2024-12-16 18:08:11 -08:00
..
Makefile	…
chtls.h	chelsio/chtls: Remove unused chtls_set_tcb_tflag	2024-10-08 15:34:38 -07:00
chtls_cm.c	…
chtls_cm.h	…
chtls_hw.c	chelsio/chtls: Remove unused chtls_set_tcb_tflag	2024-10-08 15:34:38 -07:00
chtls_io.c	…
chtls_main.c	chelsio/chtls: prevent potential integer overflow on 32bit	2024-12-16 18:08:11 -08:00