xfrm: Allow inserting policies with matching mark and different priorities
authorSteffen Klassert <steffen.klassert@secunet.com>
Mon, 11 Feb 2013 06:02:36 +0000 (07:02 +0100)
committerSteffen Klassert <steffen.klassert@secunet.com>
Mon, 11 Feb 2013 13:07:01 +0000 (14:07 +0100)
commit7cb8a93968e395e40a72a50da0b6114e752304b4
tree2d2ab4468555120fb04b86097fce9e31b584154f
parent8d068875caca3b507ffa8a57d521483fd4eebcc7
xfrm: Allow inserting policies with matching mark and different priorities

We currently can not insert policies with mark and mask
such that some flows would be matched from both policies.
We make this possible when the priority of these policies
are different. If both policies match a flow, the one with
the higher priority is used.

Reported-by: Emmanuel Thierry <emmanuel.thierry@telecom-bretagne.eu>
Reported-by: Romain Kuntz <r.kuntz@ipflavors.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_policy.c