On Thu, Mar 19, 2026 at 3:20 PM Tejasree Kondoj <[email protected]> wrote:
>
> Validate DES/3DES and AES key lengths before copying
> into SA cipher_key[] to avoid out-of-bounds write
> into adjacent IV/salt fields.
>
> Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")
> Cc: [email protected]
>
> Signed-off-by: Tejasree Kondoj <[email protected]>
Updated the git commit as follows and applied to
dpdk-next-net-mrvl/for-main. Thanks
common/cnxk: fix cipher key length validation
Validate DES/3DES and AES key lengths before copying
into SA cipher_key[] to avoid out-of-bounds write
into adjacent IV/salt fields.
Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")
Cc: [email protected]
Signed-off-by: Tejasree Kondoj <[email protected]>