On Wed, Jun 14, 2017 at 01:35:37PM +0300, Dan Carpenter wrote: > The default error code in pfkey_msg2xfrm_state() is -ENOBUFS. We > added a new call to security_xfrm_state_alloc() which sets "err" to zero > so there several places where we can return ERR_PTR(0) if kmalloc() > fails. The caller is expecting error pointers so it leads to a NULL > dereference. > > Fixes: df71837d5024 ("[LSM-IPSec]: Security association restriction.") > Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> Also applied, thanks a lot Dan! -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html