xfrm: Don't use sk_family for socket policy lookups
authorSteffen Klassert <steffen.klassert@secunet.com>
Tue, 14 Feb 2017 06:43:56 +0000 (07:43 +0100)
committerSteffen Klassert <steffen.klassert@secunet.com>
Tue, 14 Feb 2017 11:34:30 +0000 (12:34 +0100)
commit4c86d77743a54fb2d8a4d18a037a074c892bb3be
treefc92aecb864817fb9a543a7de3e0c6ccda0949ce
parentc282222a45cb9503cbfbebfdb60491f06ae84b49
xfrm: Don't use sk_family for socket policy lookups

On IPv4-mapped IPv6 addresses sk_family is AF_INET6,
but the flow informations are created based on AF_INET.
So the routing set up 'struct flowi4' but we try to
access 'struct flowi6' what leads to an out of bounds
access. Fix this by using the family we get with the
dst_entry, like we do it for the standard policy lookup.

Reported-by: Dmitry Vyukov <dvyukov@google.com>
Tested-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_policy.c