{"push_id":1917355450,"size":1,"distinct_size":1,"ref":"refs/heads/cm-14.1","head":"cf02d516c50c88ad7e8b1bc03c3f913b85ae41d5","before":"a8a7d4f231e9b75fd13762e67e413f1fba298025","commits":[{"sha":"cf02d516c50c88ad7e8b1bc03c3f913b85ae41d5","author":{"name":"Vladis Dronov","email":"41435c47c64e54f8ec26bbc1be6d7972ea4d40bd@redhat.com"},"message":"xfrm: policy: check policy direction value\n\nThe 'dir' parameter in xfrm_migrate() is a user-controlled byte which is used\nas an array index. This can lead to an out-of-bound access, kernel lockup and\nDoS. Add a check for the 'dir' value.\n\nThis fixes CVE-2017-11600.\n\nChange-Id: I7ce3c3cc90e352d854ddb6361730918fe143b6ec\nReferences: https://bugzilla.redhat.com/show_bug.cgi?id=1474928\nFixes: 80c9abaabf42 (\"[XFRM]: Extension for dynamic update of endpoint address(es)\")\nCc: <stable@vger.kernel.org> # v2.6.21-rc1\nReported-by: \"bo Zhang\" <zhangbo5891001@gmail.com>\nSigned-off-by: Vladis Dronov <vdronov@redhat.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/syphyr/android_kernel_samsung_msm8976/commits/cf02d516c50c88ad7e8b1bc03c3f913b85ae41d5"}]}
{"actor":{"display_login":"syphyr"}}