[RFC PATCH v3 17/19] calipso: Add validation of CALIPSO option.

2016-02-17 Thread Huw Davies
We check lengths, checksum and the DOI. We leave checking of the level and categories for the socket layer. Signed-off-by: Huw Davies --- include/net/calipso.h | 6 ++ net/ipv6/calipso.c| 42 ++ net/ipv6/exthdrs.c| 27

Re: [RFC PATCH v3 17/19] calipso: Add validation of CALIPSO option.

2016-05-06 Thread Paul Moore
On Wed, Feb 17, 2016 at 8:22 AM, Huw Davies wrote: > We check lengths, checksum and the DOI. We leave checking of the > level and categories for the socket layer. > > Signed-off-by: Huw Davies > --- > include/net/calipso.h | 6 ++ > net/ipv6/calipso.c| 42 ++

Re: [RFC PATCH v3 17/19] calipso: Add validation of CALIPSO option.

2016-05-09 Thread Huw Davies
On Fri, May 06, 2016 at 06:59:32PM -0400, Paul Moore wrote: > On Wed, Feb 17, 2016 at 8:22 AM, Huw Davies wrote: > > We check lengths, checksum and the DOI. We leave checking of the > > level and categories for the socket layer. > > > > Signed-off-by: Huw Davies > > --- > > include/net/calipso.

Re: [RFC PATCH v3 17/19] calipso: Add validation of CALIPSO option.

2016-05-09 Thread Paul Moore
On Mon, May 9, 2016 at 6:39 AM, Huw Davies wrote: > On Fri, May 06, 2016 at 06:59:32PM -0400, Paul Moore wrote: >> On Wed, Feb 17, 2016 at 8:22 AM, Huw Davies wrote: >> > We check lengths, checksum and the DOI. We leave checking of the >> > level and categories for the socket layer. >> > >> > Si