From: Alexey Kodanev <[email protected]>
Date: Tue, 26 Sep 2017 15:14:29 +0300
> When running LTP IPsec tests, KASan might report:
>
> BUG: KASAN: use-after-free in vti_tunnel_xmit+0xeee/0xff0 [ip_vti]
> Read of size 4 at addr ffff880dc6ad1980 by task swapper/0/0
> ...
...
> Can be fixed if we get skb->len before dst_output().
>
> Fixes: b9959fd3b0fa ("vti: switch to new ip tunnel code")
> Fixes: 22e1b23dafa8 ("vti6: Support inter address family tunneling.")
> Signed-off-by: Alexey Kodanev <[email protected]>
Applied and queued up for -stable.
