Commit 84967dee authored by Minhong He's avatar Minhong He Committed by Jakub Kicinski
Browse files

ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add



The seg6_genl_sethmac() directly uses the algorithm ID provided by the
userspace without verifying whether it is an HMAC algorithm supported
by the system.
If an unsupported HMAC algorithm ID is configured, packets using SRv6 HMAC
will be dropped during encapsulation or decapsulation.

Fixes: 4f4853dc ("ipv6: sr: implement API to control SR HMAC structure")
Signed-off-by: default avatarMinhong He <heminhong@kylinos.cn>
Reviewed-by: default avatarKuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20250815063845.85426-1-heminhong@kylinos.cn


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
parent 864e3396
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment