Re: [PATCH] xfrm: use ISO C standard for array in linux/xfrm.h

On Wed, Oct 17, 2012 at 09:50:58AM +0200, Nicolas Dichtel wrote:

We got a problem with "ip xfrm state add" when compiled with gcc 4.4.6.
Error was "*** buffer overflow detected ***: ip terminated", because
when we try to copy the key in struct xfrm_algo, the function
strncpy() calls some builtin checks about the size of the
destination buffer, which is 0. With the standard notation, there is
no problem.

This is likely to be a gcc FORITFY bug. Try to build iproute2 with
the -D_FORTIFY_SOURCE=0 flag.