projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 013cb81) | patch
xfrm: Fix ESN sequence number handling for IPsec GSO packets.
authorSteffen Klassert <steffen.klassert@secunet.com>
Wed, 28 Feb 2018 08:23:19 +0000 (09:23 +0100)
committerSteffen Klassert <steffen.klassert@secunet.com>
Thu, 1 Mar 2018 07:14:50 +0000 (08:14 +0100)
commitb8b549eec8187ac1b12075d69a2d84d89b5e811a
treec5acf45f7b62b6504b87f2332e2639f7fb678b49tree | snapshot
parent013cb81e89f8a70deef086ca29a923faf5585ab0commit | diff
xfrm: Fix ESN sequence number handling for IPsec GSO packets.

When IPsec offloading was introduced, we accidentally incremented
the sequence number counter on the xfrm_state by one packet
too much in the ESN case. This leads to a sequence number gap of
one packet after each GSO packet. Fix this by setting the sequence
number to the correct value.

Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_replay_overflow functions for offloading")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_replay.c diff | blob | history
Domain: System / Kernel;