tree 29fd34fd5df068375acbd51de352e0955de633b6
parent 876fc03aaa4d8cc81331119d80d3e9bfbf1164e8
author Steffen Klassert <steffen.klassert@secunet.com> 1392813203 +0100
committer Steffen Klassert <steffen.klassert@secunet.com> 1392902998 +0100

xfrm: Fix NULL pointer dereference on sub policy usage

xfrm_state_sort() takes the unsorted states from the src array
and stores them into the dst array. We try to get the namespace
from the dst array which is empty at this time, so take the
namespace from the src array instead.

Fixes: 283bc9f35bbbc ("xfrm: Namespacify xfrm state/policy locks")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>