• David S. Miller's avatar
    Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec · 8474c8ca
    David S. Miller authored
    Steffen Klassert says:
    
    ====================
    pull request (net): ipsec 2017-03-06
    
    1) Fix lockdep splat on xfrm policy subsystem initialization.
       From Florian Westphal.
    
    2) When using socket policies on IPv4-mapped IPv6 addresses,
       we access the flow informations of the wrong address family
       what leads to an out of bounds access. Fix this by using
       the family we get with the dst_entry, like we do it for the
       standard policy lookup.
    
    3) vti6 can report a PMTU below IPV6_MIN_MTU. Fix this by
       adding a check for that before sending a ICMPV6_PKT_TOOBIG
       message.
    
    Please pull or let me know if there are problems.
    ====================
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    8474c8ca
xfrm_policy.c 80.9 KB