1) Fix a memleak when we don't find a inner_mode
during bundle creation. From David Miller.
2) Fix a xfrm policy dump crash. We may crash
on error when dumping policies via netlink.
Fix this by initializing the policy walk
with the cb->start method. This fix is a
serious stable candidate. From Herbert Xu.
Please pull or let me know if there are problems.
Thanks!
The following changes since commit c0576e3975084d4699b7bfef578613fb8e1144f6:
net: call cgroup_sk_alloc() earlier in sk_clone_lock() (2017-10-10 20:24:29
-0700)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master
for you to fetch changes up to 1137b5e2529a8f5ca8ee709288ecba3e68044df2:
ipsec: Fix aborted xfrm policy dump crash (2017-10-23 09:35:48 +0200)
----------------------------------------------------------------
David Miller (1):
ipsec: Fix dst leak in xfrm_bundle_create().
Herbert Xu (1):
ipsec: Fix aborted xfrm policy dump crash
net/xfrm/xfrm_policy.c | 16 ++++++++--------
net/xfrm/xfrm_user.c | 25 +++++++++++++++----------
2 files changed, 23 insertions(+), 18 deletions(-)
