)]}'
{
  "commit": "20eb20851385e53d27dff9ed79c4e68e58e3d9da",
  "tree": "b3a5a5e16f823d5ca39f44124bf18b5f63fa2a2f",
  "parents": [
    "657197486950474bf30290344339fd0914fe99c9"
  ],
  "author": {
    "name": "Steffen Klassert",
    "email": "steffen.klassert@secunet.com",
    "time": "Tue Sep 04 00:03:29 2012 +0000"
  },
  "committer": {
    "name": "Greg Kroah-Hartman",
    "email": "gregkh@linuxfoundation.org",
    "time": "Sat Oct 13 05:38:40 2012 +0900"
  },
  "message": "xfrm: Workaround incompatibility of ESN and async crypto\n\n[ Upstream commit 3b59df46a449ec9975146d71318c4777ad086744 ]\n\nESN for esp is defined in RFC 4303. This RFC assumes that the\nsequence number counters are always up to date. However,\nthis is not true if an async crypto algorithm is employed.\n\nIf the sequence number counters are not up to date on sequence\nnumber check, we may incorrectly update the upper 32 bit of\nthe sequence number. This leads to a DOS.\n\nWe workaround this by comparing the upper sequence number,\n(used for authentication) with the upper sequence number\ncomputed after the async processing. We drop the packet\nif these numbers are different.\n\nTo do this, we introduce a recheck function that does this\ncheck in the ESN case.\n\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "96239e78e621fa0654d9e436d8cbe50b8ebff5d0",
      "old_mode": 33188,
      "old_path": "include/net/xfrm.h",
      "new_id": "9f7e94ba66963085d0979560b3f8bd9a05c3af0a",
      "new_mode": 33188,
      "new_path": "include/net/xfrm.h"
    },
    {
      "type": "modify",
      "old_id": "54a0dc2e2f8d45d7a842be98882969f696c07ec2",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_input.c",
      "new_id": "ab2bb42fe094b7390d5135ec6e37b9113ea8219b",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_input.c"
    },
    {
      "type": "modify",
      "old_id": "2f6d11d04a2b29910a1f284d3e3af8b0db1bfcce",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_replay.c",
      "new_id": "3efb07d3eb27425c8b9b5114c925eb9e7f402c9e",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_replay.c"
    }
  ]
}