Hangyu Hua f85daf0e72 xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() ... xfrm_policy_lookup() will call xfrm_pol_hold_rcu() to get a refcount of pols[0]. This refcount can be dropped in xfrm_expand_policies() when xfrm_expand_policies() return error. pols[0]'s refcount is balanced in here. But xfrm_bundle_lookup() will also call xfrm_pols_put() with num_pols == 1 to drop this refcount when xfrm_expand_policies() return error. This patch also fix an illegal address access. pols[0] will save a error point when xfrm_policy_lookup fails. This lead to xfrm_pols_put to resolve an illegal address in xfrm_bundle_lookup's error path. Fix these by setting num_pols = 0 in xfrm_expand_policies()'s error path. Fixes: 80c802f307 ("xfrm: cache bundles instead of policies for outgoing flows") Signed-off-by: Hangyu Hua <hbh25y@gmail.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2022-06-02 11:05:19 +02:00
..
espintcp.c	net: remove noblock parameter from recvmsg() entities	2022-04-12 15:00:25 +02:00
Kconfig	xfrm/compat: Add 32=>64-bit messages translator	2020-09-24 08:53:03 +02:00
Makefile	xfrm: Provide API to register translator module	2020-09-24 08:53:03 +02:00
xfrm_algo.c	xfrm: Add support for SM4 symmetric cipher algorithm	2021-12-23 09:32:51 +01:00
xfrm_compat.c	xfrm: rate limit SA mapping change message to user space	2021-12-23 09:32:51 +01:00
xfrm_device.c	xfrm: drop not needed flags variable in XFRM offload struct	2022-05-06 08:35:46 +02:00
xfrm_hash.c	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
xfrm_hash.h	xfrm: add state hashtable keyed by seq	2021-05-14 13:52:01 +02:00
xfrm_inout.h	xfrm: move xfrm4_extract_header to common helper	2020-05-06 09:40:08 +02:00
xfrm_input.c	xfrm: update SA curlft.use_time	2021-12-23 09:32:50 +01:00
xfrm_interface.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-03-10 17:16:56 -08:00
xfrm_ipcomp.c	net: xfrm: Fix end of loop tests for list_for_each_entry	2021-07-26 12:26:28 +02:00
xfrm_output.c	xfrm: do not set IPv4 DF flag when encapsulating IPv6 frames <= 1280 bytes.	2022-05-25 11:41:26 +02:00
xfrm_policy.c	xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()	2022-06-02 11:05:19 +02:00
xfrm_proc.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
xfrm_replay.c	xfrm: replay: remove last replay indirection	2021-06-21 09:55:06 +02:00
xfrm_state.c	xfrm: rename xfrm_state_offload struct to allow reuse	2022-05-06 08:29:28 +02:00
xfrm_sysctl.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_user.c	xfrm: store and rely on direction to construct offload flags	2022-05-06 08:31:04 +02:00