Jarkko Sakkinen <jarkko at kernel.org> wrote: > - if (desclen > U16_MAX) This should also be KEY_MAX_DESC_SIZE. > + if (desclen > U16_MAX || type->def_datalen > INT_MAX - desclen - 1) That looks awkward, but I can see why you did it. Reviewed-by: David Howells <dhowells at redhat.com>