)]}'
{
  "commit": "3c5235a67acbaf8f7a86e2d0780d34cfaea696e3",
  "tree": "637033999243eb5c6216f12cf9391dffc4d34e63",
  "parents": [
    "438073c9f4709183255dbb94f624942ae730ae59"
  ],
  "author": {
    "name": "Vaibhav Rustagi",
    "email": "vaibhavrustagi@google.com",
    "time": "Mon Mar 21 17:03:11 2022 -0700"
  },
  "committer": {
    "name": "COS Cherry Picker",
    "email": "cloud-image-release@prod.google.com",
    "time": "Tue Mar 22 19:03:39 2022 -0700"
  },
  "message": "esp: Fix possible buffer overflow in ESP transformation\n\n[ Upstream commit ebe48d368e97d007bfeb76fcb065d6cfc4c96645 ]\n\nThe maximum message size that can be send is bigger than\nthe  maximum site that skb_page_frag_refill can allocate.\nSo it is possible to write beyond the allocated buffer.\n\nFix this by doing a fallback to COW in that case.\n\nv2:\n\nAvoid get get_order() costs as suggested by Linus Torvalds.\n\nFor having the patch build on v5.10, `SKB_FRAG_PAGE_ORDER` declaration\nis moved from net/core/sock.c to include/net/sock.c.\n\nBUG\u003db/225430954\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed possible buffer overflow in ESP transformation.\n\ncos-patch: bug\nFixes: cac2661c53f3 (\"esp4: Avoid skb_cow_data whenever possible\")\nFixes: 03e2a30f6a27 (\"esp6: Avoid skb_cow_data whenever possible\")\nReported-by: valis \u003csec@valis.email\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: Vaibhav Rustagi \u003cvaibhavrustagi@google.com\u003e\nChange-Id: Ibba7d1063e1e78fe8cecb2d0ae1e94a586101a93\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/31062\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9c5637d41d95168052686caf7b3ff51b517e6b9b",
      "old_mode": 33188,
      "old_path": "include/net/esp.h",
      "new_id": "90cd02ff77ef67f7f65e2c53127c4510c23bd4a9",
      "new_mode": 33188,
      "new_path": "include/net/esp.h"
    },
    {
      "type": "modify",
      "old_id": "bb40d4de545caef57376884e62a73cbd8033ae48",
      "old_mode": 33188,
      "old_path": "include/net/sock.h",
      "new_id": "9426af15b1b8b2261c7c9874c401e68229e5648a",
      "new_mode": 33188,
      "new_path": "include/net/sock.h"
    },
    {
      "type": "modify",
      "old_id": "ed9857b2875dcfbd302f96711396419cc83d10eb",
      "old_mode": 33188,
      "old_path": "net/ipv4/esp4.c",
      "new_id": "e2b91fca93ba9c816128b90896eb662c4f9102dd",
      "new_mode": 33188,
      "new_path": "net/ipv4/esp4.c"
    },
    {
      "type": "modify",
      "old_id": "7f2ffc7b1f75a64c5dbfc930870ea2829d4f6fcb",
      "old_mode": 33188,
      "old_path": "net/ipv6/esp6.c",
      "new_id": "e106dc3ec039c7020ddc2fe36b088023e1cf7c18",
      "new_mode": 33188,
      "new_path": "net/ipv6/esp6.c"
    }
  ]
}