Messages in this thread | | | Date | Fri, 3 Nov 2017 13:10:12 +0100 | From | Steffen Klassert <> | Subject | Re: KASAN: stack-out-of-bounds Read in xfrm_state_find (2) |
| |
On Thu, Nov 02, 2017 at 01:25:28PM +0100, Florian Westphal wrote: > Steffen Klassert <steffen.klassert@secunet.com> wrote: > > > I'd propose to use the addresses from the template unconditionally, > > like the (untested) patch below does. > > > > Unfortunalely the reproducer does not work with my config, > > sendto returns EAGAIN. Could anybody try this patch? > > The reproducer no longer causes KASAN spew with your patch, > but i don't have a test case that actually creates/uses a tunnel.
The patch passed my standard tests, so I tend apply it after a day in the ipsec/testing branch.
| |