)]}'
{
  "commit": "dc4ea1dc1f1d6b36bf959982e96e45da22001121",
  "tree": "b541c469dcd1eb58c2a434b9c86f9d1788eadf57",
  "parents": [
    "a4609d20866fc550a9e21f100a3562e939ad452b"
  ],
  "author": {
    "name": "Vaibhav Rustagi",
    "email": "vaibhavrustagi@google.com",
    "time": "Tue Mar 22 11:04:46 2022 -0700"
  },
  "committer": {
    "name": "Vaibhav Rustagi",
    "email": "vaibhavrustagi@google.com",
    "time": "Wed Mar 23 04:31:55 2022 +0000"
  },
  "message": "esp: Fix possible buffer overflow in ESP transformation\n\n[ Upstream commit ebe48d368e97d007bfeb76fcb065d6cfc4c96645 ]\n\nThe maximum message size that can be send is bigger than\nthe  maximum site that skb_page_frag_refill can allocate.\nSo it is possible to write beyond the allocated buffer.\n\nFix this by doing a fallback to COW in that case.\n\nv2:\n\nAvoid get get_order() costs as suggested by Linus Torvalds.\n\nFor having the patch build on v5.4, following changes are done:\n - `SKB_FRAG_PAGE_ORDER` declaration is moved from net/core/sock.c to include/net/sock.c.\n - Remove changes introduced due to `xfrm: add support for UDPv6 encapsulation of ESP` in esp6_output_head\n\nBUG\u003db/225430860\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed possible buffer overflow in ESP transformation.\n\ncos-patch: bug\nFixes: cac2661c53f3 (\"esp4: Avoid skb_cow_data whenever possible\")\nFixes: 03e2a30f6a27 (\"esp6: Avoid skb_cow_data whenever possible\")\nReported-by: valis \u003csec@valis.email\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: Vaibhav Rustagi \u003cvaibhavrustagi@google.com\u003e\nChange-Id: Ibba7d1063e1e78fe8cecb2d0ae1e94a586101a93\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/31081\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "117652eb6ea32a836cd269f01e70f0e3c990fbc7",
      "old_mode": 33188,
      "old_path": "include/net/esp.h",
      "new_id": "465e38890ee986023fd7502d0abeb80bca3182a5",
      "new_mode": 33188,
      "new_path": "include/net/esp.h"
    },
    {
      "type": "modify",
      "old_id": "fed870667f6a6baf4ef7b86865018b79d5fda93c",
      "old_mode": 33188,
      "old_path": "include/net/sock.h",
      "new_id": "b5b3c6b92c3a8740222e3dbb0c2e67db251f490c",
      "new_mode": 33188,
      "new_path": "include/net/sock.h"
    },
    {
      "type": "modify",
      "old_id": "bf4f9d5cba2170451e163c8f86312a20c133b125",
      "old_mode": 33188,
      "old_path": "net/core/sock.c",
      "new_id": "a4ee17494eca65cea113683086fa0a7698190ac4",
      "new_mode": 33188,
      "new_path": "net/core/sock.c"
    },
    {
      "type": "modify",
      "old_id": "00210e55b4cd1526b15e8dbf4e2c6b2bf0ae46e1",
      "old_mode": 33188,
      "old_path": "net/ipv4/esp4.c",
      "new_id": "ef20f550d2f8147b093df62221e145ca3f800afc",
      "new_mode": 33188,
      "new_path": "net/ipv4/esp4.c"
    },
    {
      "type": "modify",
      "old_id": "7a739f16d82b2e325b34efe62da3a00a0f4e2f41",
      "old_mode": 33188,
      "old_path": "net/ipv6/esp6.c",
      "new_id": "79f117e33b80eeaa281558f82c34a1f5c17e5333",
      "new_mode": 33188,
      "new_path": "net/ipv6/esp6.c"
    }
  ]
}