1) Fix a use after free due to a reallocated skb head.
From Florian Westphal.
2) Fix sporadic lookup failures on labeled IPSEC.
From Florian Westphal.
3) Fix a stack out of bounds when a socket policy is applied
to an IPv6 socket that sends IPv4 packets.
Please pull or let me know if there are problems.
Thanks!
The following changes since commit 74784da82ff74379d0583a3ffe42835888705ac7:
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf (2017-11-02
16:52:41 +0900)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master
for you to fetch changes up to c9f3f813d462c72dbe412cee6a5cbacf13c4ad5e:
xfrm: Fix stack-out-of-bounds read in xfrm_state_find. (2017-11-03 13:02:41
+0100)
----------------------------------------------------------------
Florian Westphal (2):
xfrm: defer daddr pointer assignment after spi parsing
xfrm: do unconditional template resolution before pcpu cache check
Steffen Klassert (1):
xfrm: Fix stack-out-of-bounds read in xfrm_state_find.
net/xfrm/xfrm_input.c | 4 +--
net/xfrm/xfrm_policy.c | 71 +++++++++++++++++++++++++-------------------------
2 files changed, 37 insertions(+), 38 deletions(-)
