[PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX

Jarkko Sakkinen jarkko at kernel.org
Mon Oct 19 21:07:32 UTC 2026


On Mon, Oct 19, 2026 at 12:31:48PM -0700, Eric Biggers wrote:
> On Mon, Oct 19, 2026 at 09:17:25PM +0300, Jarkko Sakkinen wrote:
> > Protect quota from overflowing by rejecting @datalen values that
> > surpass over INT_MAX.
> 
> Is there an example of how this can happen, and why the limit needs to
> still be so large?  add_key() for example limits the payload length to
> 1 MiB.

I did a bit scavenging, and to my knowleddge, no. So I would retain
this as safety measure but would not consider it as a bug fix.

> 
> - Eric

Br, Jarkko



More information about the Linux-security-module-archive mailing list