{"push_id":2325523973,"size":1,"distinct_size":1,"ref":"refs/heads/cm-14.1","head":"0a932107afac2bf2b862243e0d91dde6e3d19a5f","before":"39b878bcdda7069335126f2d505a11c18d7a97bb","commits":[{"sha":"0a932107afac2bf2b862243e0d91dde6e3d19a5f","author":{"name":"Lorenzo Colitti","email":"bb03c7a1072f7993eaae5ac54ef7bc06e4588478@google.com"},"message":"UPSTREAM: net: xfrm: allow clearing socket xfrm policies.\n\nCurrently it is possible to add or update socket policies, but\nnot clear them. Therefore, once a socket policy has been applied,\nthe socket cannot be used for unencrypted traffic.\n\nThis patch allows (privileged) users to clear socket policies by\npassing in a NULL pointer and zero length argument to the\n{IP,IPV6}_{IPSEC,XFRM}_POLICY setsockopts. This results in both\nthe incoming and outgoing policies being cleared.\n\nThe simple approach taken in this patch cannot clear socket\npolicies in only one direction. If desired this could be added\nin the future, for example by continuing to pass in a length of\nzero (which currently is guaranteed to return EMSGSIZE) and\nmaking the policy be a pointer to an integer that contains one\nof the XFRM_POLICY_{IN,OUT} enum values.\n\nAn alternative would have been to interpret the length as a\nsigned integer and use XFRM_POLICY_IN (i.e., 0) to clear the\ninput policy and -XFRM_POLICY_OUT (i.e., -1) to clear the output\npolicy.\n\nBug: 65857891\nChange-Id: Ib8fb501a494caa027ce9f9cfec315f5936d3913b\nTested: https://android-review.googlesource.com/539816\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","distinct":true,"url":"https://api.github.com/repos/gabrielgagz/android_kernel_razer_pearlyn/commits/0a932107afac2bf2b862243e0d91dde6e3d19a5f"}]}
{"actor":{"display_login":"gabrielgagz"}}