From: Steffen Klassert <steffen.klass...@secunet.com> Date: Wed, 1 Nov 2017 11:05:00 +0100
> 1) Fix a memleak when a packet matches a policy > without a matching state. > > 2) Reset the socket cached dst_entry when inserting > a socket policy, otherwise the policy might be > ignored. From Jonathan Basseri. > > 3) Fix GSO for a IPsec, GRE tunnel combination. > We reset the encapsulation field at the skb > too erly, as a result GRE does not segment > GSO packets. Fix this by resetting the the > encapsulation field right before the > transformation where the inner headers get > invalid. > > Please pull or let me know if there are problems. Pulled, thanks.