diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2022-04-08 05:38:19 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2022-04-08 12:49:08 +0200 |
| commit | a8340cc02beed4ffbb5e7b1b0eadca445323fc6a (patch) | |
| tree | 904d42752ec1f00e35de34706caa54058b8ff6f2 /net/tls/tls_sw.c | |
| parent | tls: rx: init decrypted status in tls_read_size() (diff) | |
| download | linux-a8340cc02beed4ffbb5e7b1b0eadca445323fc6a.tar.xz linux-a8340cc02beed4ffbb5e7b1b0eadca445323fc6a.zip | |
tls: rx: use a define for tag length
TLS 1.3 has to strip padding, and it starts out 16 bytes
from the end of the record. Make it clear this is because
of the auth tag.
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/tls/tls_sw.c')
| -rw-r--r-- | net/tls/tls_sw.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/tls/tls_sw.c b/net/tls/tls_sw.c index 34e74b26211d..ae90749f182a 100644 --- a/net/tls/tls_sw.c +++ b/net/tls/tls_sw.c @@ -136,9 +136,9 @@ static int padding_length(struct tls_prot_info *prot, struct sk_buff *skb) /* Determine zero-padding length */ if (prot->version == TLS_1_3_VERSION) { + int back = TLS_TAG_SIZE + 1; char content_type = 0; int err; - int back = 17; while (content_type == 0) { if (back > rxm->full_len - prot->prepend_size) @@ -2496,7 +2496,7 @@ int tls_set_sw_offload(struct sock *sk, struct tls_context *ctx, int tx) /* Sanity-check the sizes for stack allocations. */ if (iv_size > MAX_IV_SIZE || nonce_size > MAX_IV_SIZE || - rec_seq_size > TLS_MAX_REC_SEQ_SIZE) { + rec_seq_size > TLS_MAX_REC_SEQ_SIZE || tag_size != TLS_TAG_SIZE) { rc = -EINVAL; goto free_priv; } |