Ilan Tayari 7e9e9202bc xfrm: Clear RX SKB secpath xfrm_offload ... If an incoming packet undergoes XFRM crypto-offload, its secpath is filled with xfrm_offload struct denoting offload information. If the SKB is then forwarded to a device which supports crypto- offload, the stack wrongfully attempts to offload it (even though the output SA may not exist on the device) due to the leftover secpath xo. Clear the ingress xo by zeroizing secpath->olen just before delivering the decapsulated packet to the network stack. Fixes: d77e38e612 ("xfrm: Add an IPsec hardware offloading API") Signed-off-by: Ilan Tayari <ilant@mellanox.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2017-08-02 11:00:15 +02:00
..
Kconfig	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2017-02-16 21:25:49 -05:00
Makefile	xfrm: fix xfrm_dev_event() missing when compile without CONFIG_XFRM_OFFLOAD	2017-06-07 08:16:27 +02:00
xfrm_algo.c	xfrm: use IS_ENABLED() instead of checking for built-in or module	2016-09-10 21:19:11 -07:00
xfrm_device.c	xfrm: Auto-load xfrm offload modules	2017-08-02 11:00:15 +02:00
xfrm_hash.c
xfrm_hash.h	xfrm: use "unsigned int" in __xfrm6_pref_hash()	2017-03-24 07:03:12 +01:00
xfrm_input.c	xfrm: Clear RX SKB secpath xfrm_offload	2017-08-02 11:00:15 +02:00
xfrm_ipcomp.c
xfrm_output.c	xfrm: Add encapsulation header offsets while SKB is not encrypted	2017-04-14 10:07:39 +02:00
xfrm_policy.c	xfrm: add xdst pcpu cache	2017-07-18 11:13:41 -07:00
xfrm_proc.c	proc: Reduce cache miss in xfrm_statistics_seq_show	2016-09-30 01:50:45 -04:00
xfrm_replay.c	xfrm: Add xfrm_replay_overflow functions for offloading	2017-04-14 10:07:01 +02:00
xfrm_state.c	xfrm: Auto-load xfrm offload modules	2017-08-02 11:00:15 +02:00
xfrm_sysctl.c	net: xfrm: Change u32 sysctl entries to use proc_douintvec	2016-09-07 23:17:53 -07:00
xfrm_user.c	xfrm: Auto-load xfrm offload modules	2017-08-02 11:00:15 +02:00