[Yakkety][Xenial][SRU][PATCH 0/1] UBUNTU: SAUCE: (no-up) xfrm: Ignore socket policies when rebuilding hash tables

Joseph Salisbury joseph.salisbury at canonical.com
Thu Aug 18 20:29:02 UTC 2016


BugLink: http://bugs.launchpad.net/bugs/1613787

== SRU Justification ==
This patch fixes ipsec crash when updating spd thresholds.  To update the 
thresholds: 'ip xfrm policy set hthresh4 24 32'

This patch is in the IPsec tree.  However, it is not in mainline as of yet, 
which is why I submitted it as SAUCE.  This patch fixes a bug introduced by 
the following commit:  
53c2e285f970 ("xfrm: Do not hash socket policies")

This patch is only needed in >= 3.19 kernels.    

Patch discussion upstream:
http://patchwork.ozlabs.org/patch/654026/

== Fix ==
Author: Tobias Brunner <tobias at strongswan.org>
Date:   Tue Aug 16 14:14:59 2016 -0400

    [ipsec] xfrm: Ignore socket policies when rebuilding hash tables

== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.



Tobias Brunner (1):
  [ipsec] xfrm: Ignore socket policies when rebuilding hash tables

 net/xfrm/xfrm_policy.c | 4 ++++
 1 file changed, 4 insertions(+)

-- 
2.7.4





More information about the kernel-team mailing list