xfrm: Use memset_after() to clear padding
authorKees Cook <keescook@chromium.org>
Thu, 17 Jun 2021 15:34:19 +0000 (08:34 -0700)
committerKees Cook <keescook@chromium.org>
Mon, 18 Oct 2021 19:28:52 +0000 (12:28 -0700)
commitcaf283d040f53bc4fd81ce3d2a1a364b069cfd7d
treef3271a359a8741933856b597503872c068359443
parent4797632f4f1d8af4e0670adcb97bf9800dc3beca
xfrm: Use memset_after() to clear padding

In preparation for FORTIFY_SOURCE performing compile-time and run-time
field bounds checking for memset(), avoid intentionally writing across
neighboring fields.

Clear trailing padding bytes using the new helper so that memset()
doesn't get confused about writing "past the end" of the last struct
member. There is no change to the resulting machine code.

Cc: Steffen Klassert <steffen.klassert@secunet.com>
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Cc: "David S. Miller" <davem@davemloft.net>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: netdev@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
net/xfrm/xfrm_policy.c
net/xfrm/xfrm_user.c