Applied: [Vivid][SRU][PATCH 0/1] UBUNTU: SAUCE: (no-up) xfrm: Ignore socket policies when rebuilding hash tables

Kamal Mostafa kamal at canonical.com
Tue Aug 23 18:21:44 UTC 2016


On Fri, Aug 19, 2016 at 09:43:22AM -0700, Kamal Mostafa wrote:
> On Thu, Aug 18, 2016 at 04:29:02PM -0400, Joseph Salisbury wrote:
> > BugLink: http://bugs.launchpad.net/bugs/1613787
> > 
> > == SRU Justification ==
> > This patch fixes ipsec crash when updating spd thresholds.  To update the 
> > thresholds: 'ip xfrm policy set hthresh4 24 32'
> > 
> > This patch is in the IPsec tree.  However, it is not in mainline as of yet, 
> > which is why I submitted it as SAUCE.  This patch fixes a bug introduced by 
> > the following commit:  
> > 53c2e285f970 ("xfrm: Do not hash socket policies")
> > 
> > This patch is only needed in >= 3.19 kernels.    
> 
> What about Vivid then?  It applies cleanly; Lets apply it to Vivid too, yes?

Confirmed via irc.  Applied to Vivid also.

 -Kamal


> > 
> > Patch discussion upstream:
> > http://patchwork.ozlabs.org/patch/654026/
> > 
> > == Fix ==
> > Author: Tobias Brunner <tobias at strongswan.org>
> > Date:   Tue Aug 16 14:14:59 2016 -0400
> > 
> >     [ipsec] xfrm: Ignore socket policies when rebuilding hash tables
> > 
> > == Test Case ==
> > A test kernel was built with this patch and tested by the original bug reporter.
> > The bug reporter states the test kernel resolved the bug.
> > 
> > 
> > 
> > Tobias Brunner (1):
> >   [ipsec] xfrm: Ignore socket policies when rebuilding hash tables
> > 
> >  net/xfrm/xfrm_policy.c | 4 ++++
> >  1 file changed, 4 insertions(+)
> > 
> > -- 
> > 2.7.4




More information about the kernel-team mailing list