Re: [PATCH ipsec] xfrm: Fix NULL pointer dereference on policy lookup
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2021-03-25 08:46:22
On Tue, Mar 23, 2021 at 09:26:44AM +0100, Steffen Klassert wrote:
When xfrm interfaces are used in combination with namespaces
and ESP offload, we get a dst_entry NULL pointer dereference.
This is because we don't have a dst_entry attached in the ESP
offloading case and we need to do a policy lookup before the
namespace transition.
Fix this by expicit checking of skb_dst(skb) before accessing it.
Fixes: f203b76d78092 ("xfrm: Add virtual xfrm interfaces")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>Now applied.