[Bug 241010] netipsec: key_dup_keymsg bcopy too much bytes

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=241010

--- Comment #9 from [email protected] ---
A commit in branch stable/13 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=1219a3f40db386aaa10edfea27d9cc73fdea3935

commit 1219a3f40db386aaa10edfea27d9cc73fdea3935
Author:     Andrey V. Elsukov <[email protected]>
AuthorDate: 2025-03-06 12:18:59 +0000
Commit:     Andrey V. Elsukov <[email protected]>
CommitDate: 2025-03-13 10:23:29 +0000

    pfkey2: use correct value for a key length

    The length of key data is specified via sadb_key_bits field.
    Use specified size for buffer allocation and key copying.
    Also add a check that the value of sadb_key_bits is not zero,
    as explicitly required in RFC 2367.

    PR:             241010
    Submitted by:   jean-francois.hren at stormshield eu

    (cherry picked from commit 04207850a9b988d3c04e904cb5783f33da7fe184)

 sys/netipsec/key.c | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.