[Bug 241010] netipsec: key_dup_keymsg bcopy too much bytes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=241010

--- Comment #7 from [email protected] ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=04207850a9b988d3c04e904cb5783f33da7fe184

commit 04207850a9b988d3c04e904cb5783f33da7fe184
Author:     Andrey V. Elsukov <[email protected]>
AuthorDate: 2025-03-06 12:18:59 +0000
Commit:     Andrey V. Elsukov <[email protected]>
CommitDate: 2025-03-06 12:18:59 +0000

    pfkey2: use correct value for a key length

    The length of key data is specified via sadb_key_bits field.
    Use specified size for buffer allocation and key copying.
    Also add a check that the value of sadb_key_bits is not zero,
    as explicitly required in RFC 2367.

    PR:             241010
    Submitted by:   jean-francois.hren at stormshield eu
    MFC after:      1 week

 sys/netipsec/key.c | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.