Re: [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()
From: David Howells
Date: Mon Oct 19 2026 - 12:43:28 EST
Jarkko Sakkinen <jarkko@xxxxxxxxxx> wrote:
> - if (desclen > U16_MAX)
This should also be KEY_MAX_DESC_SIZE.
> + if (desclen > U16_MAX || type->def_datalen > INT_MAX - desclen - 1)
That looks awkward, but I can see why you did it.
Reviewed-by: David Howells <dhowells@xxxxxxxxxx>