diff options
-rw-r--r-- | net/xfrm/xfrm_user.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c index 5ddda2c98af9..15ba08602aa1 100644 --- a/net/xfrm/xfrm_user.c +++ b/net/xfrm/xfrm_user.c | |||
@@ -162,6 +162,7 @@ static int attach_one_algo(struct xfrm_algo **algpp, u8 *props, | |||
162 | struct rtattr *rta = u_arg; | 162 | struct rtattr *rta = u_arg; |
163 | struct xfrm_algo *p, *ualg; | 163 | struct xfrm_algo *p, *ualg; |
164 | struct xfrm_algo_desc *algo; | 164 | struct xfrm_algo_desc *algo; |
165 | int len; | ||
165 | 166 | ||
166 | if (!rta) | 167 | if (!rta) |
167 | return 0; | 168 | return 0; |
@@ -173,11 +174,12 @@ static int attach_one_algo(struct xfrm_algo **algpp, u8 *props, | |||
173 | return -ENOSYS; | 174 | return -ENOSYS; |
174 | *props = algo->desc.sadb_alg_id; | 175 | *props = algo->desc.sadb_alg_id; |
175 | 176 | ||
176 | p = kmalloc(sizeof(*ualg) + ualg->alg_key_len, GFP_KERNEL); | 177 | len = sizeof(*ualg) + (ualg->alg_key_len + 7U) / 8; |
178 | p = kmalloc(len, GFP_KERNEL); | ||
177 | if (!p) | 179 | if (!p) |
178 | return -ENOMEM; | 180 | return -ENOMEM; |
179 | 181 | ||
180 | memcpy(p, ualg, sizeof(*ualg) + ualg->alg_key_len); | 182 | memcpy(p, ualg, len); |
181 | *algpp = p; | 183 | *algpp = p; |
182 | return 0; | 184 | return 0; |
183 | } | 185 | } |