[PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX
Jarkko Sakkinen
jarkko at kernel.org
Mon Oct 19 21:07:32 UTC 2026
On Mon, Oct 19, 2026 at 12:31:48PM -0700, Eric Biggers wrote:
> On Mon, Oct 19, 2026 at 09:17:25PM +0300, Jarkko Sakkinen wrote:
> > Protect quota from overflowing by rejecting @datalen values that
> > surpass over INT_MAX.
>
> Is there an example of how this can happen, and why the limit needs to
> still be so large? add_key() for example limits the payload length to
> 1 MiB.
I did a bit scavenging, and to my knowleddge, no. So I would retain
this as safety measure but would not consider it as a bug fix.
>
> - Eric
Br, Jarkko
More information about the Linux-security-module-archive
mailing list