Re: pull request (net): ipsec 2017-11-16

2017-11-16 Thread David Miller
From: Steffen Klassert Date: Thu, 16 Nov 2017 11:00:38 +0100 > 1) Copy policy family in clone_policy, otherwise this can >trigger a BUG_ON in af_key. From Herbert Xu. > > 2) Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find." >This added a regression with transport mode when

pull request (net): ipsec 2017-11-16

2017-11-16 Thread Steffen Klassert
1) Copy policy family in clone_policy, otherwise this can trigger a BUG_ON in af_key. From Herbert Xu. 2) Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find." This added a regression with transport mode when no addresses are configured on the policy template. Both patches are