Re: [PATCH] vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit

From: Alexey Kodanev <redacted>
Date: Tue, 26 Sep 2017 15:14:29 +0300

When running LTP IPsec tests, KASan might report:

BUG: KASAN: use-after-free in vti_tunnel_xmit+0xeee/0xff0 [ip_vti]
Read of size 4 at addr ffff880dc6ad1980 by task swapper/0/0
...

 ...

Can be fixed if we get skb->len before dst_output().

Fixes: b9959fd3b0fa ("vti: switch to new ip tunnel code")
Fixes: 22e1b23dafa8 ("vti6: Support inter address family tunneling.")
Signed-off-by: Alexey Kodanev <redacted>

Applied and queued up for -stable.