[PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX

Eric Biggers ebiggers at kernel.org
Mon Oct 19 19:31:48 UTC 2026


On Mon, Oct 19, 2026 at 09:17:25PM +0300, Jarkko Sakkinen wrote:
> Protect quota from overflowing by rejecting @datalen values that
> surpass over INT_MAX.

Is there an example of how this can happen, and why the limit needs to
still be so large?  add_key() for example limits the payload length to
1 MiB.

- Eric



More information about the Linux-security-module-archive mailing list