On Wed, Feb 14, 2018 at 02:25:22PM -0800, Dmitry Shmidt wrote:
Please add this patch to stable 3.18, 4.4 and 4.9 It exists in 4.14.
commit 8598112d04af21cf6c895670e72dcb8a9f58e74f Author: Steffen Klassert steffen.klassert@secunet.com Date: Thu Aug 31 10:37:00 2017 +0200
xfrm: Fix return value check of copy_sec_ctx. A recent commit added an output_mark. When copying this output_mark, the return value of copy_sec_ctx is overwitten without a check. Fix this by copying the output_mark before the security context. Fixes: 077fbac405bf ("net: xfrm: support setting an output mark.") Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
It does not apply to those trees at all, perhaps because 077fbac405bf is not in those kernel releases? Are you sure you need this commit backported?
thanks,
greg k-h