)]}'
{
  "commit": "dc1df9fab48bcc091abbe5f32ece016ddca8e5c6",
  "tree": "a8125cbc462b441a393e1623eb067877094d81e0",
  "parents": [
    "ded43db7d483349fc9175b68d5bacd134b387751"
  ],
  "author": {
    "name": "Vaibhav Rustagi",
    "email": "vaibhavrustagi@google.com",
    "time": "Mon Mar 21 17:03:11 2022 -0700"
  },
  "committer": {
    "name": "Vaibhav Rustagi",
    "email": "vaibhavrustagi@google.com",
    "time": "Wed Mar 23 01:28:55 2022 +0000"
  },
  "message": "esp: Fix possible buffer overflow in ESP transformation\n\n[ Upstream commit ebe48d368e97d007bfeb76fcb065d6cfc4c96645 ]\n\nThe maximum message size that can be send is bigger than\nthe  maximum site that skb_page_frag_refill can allocate.\nSo it is possible to write beyond the allocated buffer.\n\nFix this by doing a fallback to COW in that case.\n\nv2:\n\nAvoid get get_order() costs as suggested by Linus Torvalds.\n\nFor having the patch build on v5.10, `SKB_FRAG_PAGE_ORDER` declaration\nis moved from net/core/sock.c to include/net/sock.c.\n\nBUG\u003db/225430900\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed possible buffer overflow in ESP transformation.\n\ncos-patch: bug\nFixes: cac2661c53f3 (\"esp4: Avoid skb_cow_data whenever possible\")\nFixes: 03e2a30f6a27 (\"esp6: Avoid skb_cow_data whenever possible\")\nReported-by: valis \u003csec@valis.email\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: Vaibhav Rustagi \u003cvaibhavrustagi@google.com\u003e\nChange-Id: Ibba7d1063e1e78fe8cecb2d0ae1e94a586101a93\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/31061\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9c5637d41d95168052686caf7b3ff51b517e6b9b",
      "old_mode": 33188,
      "old_path": "include/net/esp.h",
      "new_id": "90cd02ff77ef67f7f65e2c53127c4510c23bd4a9",
      "new_mode": 33188,
      "new_path": "include/net/esp.h"
    },
    {
      "type": "modify",
      "old_id": "bb40d4de545caef57376884e62a73cbd8033ae48",
      "old_mode": 33188,
      "old_path": "include/net/sock.h",
      "new_id": "9426af15b1b8b2261c7c9874c401e68229e5648a",
      "new_mode": 33188,
      "new_path": "include/net/sock.h"
    },
    {
      "type": "modify",
      "old_id": "4b834bbf95e074d215d32bc6354fe83e2db2dc34",
      "old_mode": 33188,
      "old_path": "net/ipv4/esp4.c",
      "new_id": "9aae82145bc16d957f1ca6b98e3bbe410de3b56c",
      "new_mode": 33188,
      "new_path": "net/ipv4/esp4.c"
    },
    {
      "type": "modify",
      "old_id": "fc8acb15dcfbb98c125ee4bd905f8d9351d542c5",
      "old_mode": 33188,
      "old_path": "net/ipv6/esp6.c",
      "new_id": "a28301a4cc8f30db8a0f1c5180b309fe0dc13c22",
      "new_mode": 33188,
      "new_path": "net/ipv6/esp6.c"
    }
  ]
}