diff options
| author | Yan Yan <evitayan@google.com> | 2022-01-18 16:00:14 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-03-23 09:10:40 +0100 |
| commit | f82fdf0230c3ea639306f35daaac7fca11a48a7a (patch) | |
| tree | 4fa5647e427d26d0e5332f82c88fea6f87fdb01f /usr | |
| parent | 1414edd2c83807951726e689b24069da83be3131 (diff) | |
| download | linux-stable-f82fdf0230c3ea639306f35daaac7fca11a48a7a.tar.gz linux-stable-f82fdf0230c3ea639306f35daaac7fca11a48a7a.tar.bz2 linux-stable-f82fdf0230c3ea639306f35daaac7fca11a48a7a.zip | |
xfrm: Fix xfrm migrate issues when address family changes
[ Upstream commit e03c3bba351f99ad932e8f06baa9da1afc418e02 ]
xfrm_migrate cannot handle address family change of an xfrm_state.
The symptons are the xfrm_state will be migrated to a wrong address,
and sending as well as receiving packets wil be broken.
This commit fixes it by breaking the original xfrm_state_clone
method into two steps so as to update the props.family before
running xfrm_init_state. As the result, xfrm_state's inner mode,
outer mode, type and IP header length in xfrm_state_migrate can
be updated with the new address family.
Tested with additions to Android's kernel unit test suite:
https://android-review.googlesource.com/c/kernel/tests/+/1885354
Signed-off-by: Yan Yan <evitayan@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'usr')
0 files changed, 0 insertions, 0 deletions