Re: [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()

From: David Howells

Date: Mon Oct 19 2026 - 12:43:28 EST


Jarkko Sakkinen <jarkko@xxxxxxxxxx> wrote:

> - if (desclen > U16_MAX)

This should also be KEY_MAX_DESC_SIZE.

> + if (desclen > U16_MAX || type->def_datalen > INT_MAX - desclen - 1)

That looks awkward, but I can see why you did it.

Reviewed-by: David Howells <dhowells@xxxxxxxxxx>