• fernando@oss.ntt.co's avatar
    xfrm: do not leak ESRCH to user space · a4322266
    fernando@oss.ntt.co authored
    I noticed that, under certain conditions, ESRCH can be leaked from the
    xfrm layer to user space through sys_connect. In particular, this seems
    to happen reliably when the kernel fails to resolve a template either
    because the AF_KEY receive buffer being used by racoon is full or
    because the SA entry we are trying to use is in XFRM_STATE_EXPIRED
    state.
    
    However, since this could be a transient issue it could be argued that
    EAGAIN would be more appropriate. Besides this error code is not even
    documented in the man page for sys_connect (as of man-pages 3.07).
    Signed-off-by: default avatarFernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    a4322266
xfrm_policy.c 63.9 KB