Re: pull request (net): ipsec 2018-05-07

2018-05-07 Thread David Miller
From: Steffen Klassert Date: Mon, 7 May 2018 10:43:20 +0200 > 1) Always verify length of provided sadb_key to fix a >slab-out-of-bounds read in pfkey_add. From Kevin Easton. > > 2) Make sure that all states are really deleted >before we check that the state lists are empty. >Otherwis

pull request (net): ipsec 2018-05-07

2018-05-07 Thread Steffen Klassert
1) Always verify length of provided sadb_key to fix a slab-out-of-bounds read in pfkey_add. From Kevin Easton. 2) Make sure that all states are really deleted before we check that the state lists are empty. Otherwise we trigger a warning. 3) Fix MTU handling of the VTI6 interfaces on