From: Steffen Klassert
Date: Thu, 31 May 2018 12:23:24 +0200
> 1) Avoid possible overflow of the offset variable
>in _decode_session6(), this fixes an infinite
>lookp there. From Eric Dumazet.
>
> 2) We may use an error pointer in the error path of
>xfrm_bundle_create(). Fix this by
1) Avoid possible overflow of the offset variable
in _decode_session6(), this fixes an infinite
lookp there. From Eric Dumazet.
2) We may use an error pointer in the error path of
xfrm_bundle_create(). Fix this by returning this
pointer directly to the caller.
Please pull or let me k
