From: Steffen Klassert
Date: Mon, 1 Oct 2018 10:58:49 +0200
> 1) Validate address prefix lengths in the xfrm selector,
>otherwise we may hit undefined behaviour in the
>address matching functions if the prefix is too
>big for the given address family.
>
> 2) Fix skb leak on local mes
1) Validate address prefix lengths in the xfrm selector,
otherwise we may hit undefined behaviour in the
address matching functions if the prefix is too
big for the given address family.
2) Fix skb leak on local message size errors.
From Thadeu Lima de Souza Cascardo.
3) We currently
