xfrm: Fix wraparound in xfrm_policy_addr_delta()

Browse source

[ Upstream commit da64ae2d35 ]

Use three-way comparison for address components to avoid integer
wraparound in the result of xfrm_policy_addr_delta(). This ensures
that the search trees are built and traversed correctly.

Treat IPv4 and IPv6 similarly by returning 0 when prefixlen == 0.
Prefix /0 has only one equivalence class.

Fixes: 9cf545ebd5 ("xfrm: policy: store inexact policies in a tree ordered by destination address")
Signed-off-by: Visa Hankala <visa@hankala.org>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Visa Hankala 2020-12-30 16:15:53 +00:00 • committed by Greg Kroah-Hartman

parent 8ea899803b

commit 6daa52884c

2 changed files with 61 additions and 8 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

26

net/xfrm/xfrm_policy.c

View file

43

tools/testing/selftests/net/xfrm_policy.sh

View file