netdev - pull request (net): ipsec 2017-10-09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 9 Oct 2017 09:16:35 +0200
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: pull request (net): ipsec 2017-10-09

1) Fix some error paths of the IPsec offloading API.

2) Fix a NULL pointer dereference when IPsec is used
   with vti. From Alexey Kodanev.

3) Don't call xfrm_policy_cache_flush under xfrm_state_lock,
   it triggers several locking warnings. From Artem Savkov.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 1f4f554a72be0d8c164c2f5bc6ba939a1c624fb4:

  net: qualcomm: rmnet: Fix a double free (2017-09-09 14:33:27 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to dd269db84908d4d3f7c0efed85bf9d8939fb0b9b:

  xfrm: don't call xfrm_policy_cache_flush under xfrm_state_lock (2017-09-28 09:39:05 +0200)

----------------------------------------------------------------
Alexey Kodanev (1):
      vti: fix NULL dereference in xfrm_input()

Artem Savkov (1):
      xfrm: don't call xfrm_policy_cache_flush under xfrm_state_lock

Steffen Klassert (2):
      xfrm: Fix deletion of offloaded SAs on failure.
      xfrm: Fix negative device refcount on offload failure.

 net/xfrm/xfrm_device.c | 1 +
 net/xfrm/xfrm_input.c  | 6 ++++--
 net/xfrm/xfrm_state.c  | 4 ++--
 net/xfrm/xfrm_user.c   | 1 +
 4 files changed, 8 insertions(+), 4 deletions(-)