[0/2] pull request (net): ipsec 2022-04-14

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

Message

Steffen Klassert April 14, 2022, 9:19 a.m. UTC

1) Fix the output interface for VRF cases in xfrm_dst_lookup.
   From David Ahern.

2) Fix write out of bounds by doing COW on esp output when the
   packet size is larger than a page.
   From Sabrina Dubroca.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 692930cc435099580a4b9e32fa781b0688c18439:

  selftests: net: fix nexthop warning cleanup double ip typo (2022-04-03 13:09:05 +0100)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 5bd8baab087dff657e05387aee802e70304cc813:

  esp: limit skb_page_frag_refill use to a single page (2022-04-13 10:16:11 +0200)

----------------------------------------------------------------
David Ahern (1):
      xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup

Sabrina Dubroca (1):
      esp: limit skb_page_frag_refill use to a single page

 include/net/esp.h      | 2 --
 net/ipv4/esp4.c        | 5 ++---
 net/ipv6/esp6.c        | 5 ++---
 net/xfrm/xfrm_policy.c | 4 +++-
 4 files changed, 7 insertions(+), 9 deletions(-)