From: Steffen Klassert <steffen.klass...@secunet.com> Date: Thu, 28 May 2015 09:28:03 +0200
> 1) Fix a race in xfrm_state_lookup_byspi, we need to take > the refcount before we release xfrm_state_lock. > From Li RongQing. > > 2) Fix IV generation on ESN state. We used just the > low order sequence numbers for IV generation on > ESN, as a result the IV can repeat on the same > state. Fix this by using the high order sequence > number bits too and make sure to always initialize > the high order bits with zero. These patches are > serious stable candidates. Fixes from Herbert Xu. > > 3) Fix the skb->mark handling on vti. We don't > reset skb->mark in skb_scrub_packet anymore, > so vti must care to restore the original > value back after it was used to lookup the > vti policy and state. Fixes from Alexander Duyck. > > Please pull or let me know if there are problems. Pulled, thanks Steffen. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
