Re: [PATCH] macsec: avoid heap overflow in skb_to_sgvec

[Jason A. Donenfeld]

On Tue, Apr 25, 2017 at 5:12 PM, Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> wrote:
>> https://patchwork.ozlabs.org/patch/754861/
>
> Yes, that prevents the overflow, but now you're just dropping
> packets.

Right, it's a so-called "defense-in-depth" measure.

> I'll review that later, let's fix the overflow without
> breaking connectivity for now.

Agreed.