diff options
| author | Ghalem Boudour <[email protected]> | 2021-11-19 18:20:16 +0100 |
|---|---|---|
| committer | Steffen Klassert <[email protected]> | 2021-11-23 10:12:21 +0100 |
| commit | bcf141b2eb551b3477b24997ebc09c65f117a803 (patch) | |
| tree | b4f482db1463cfdd01d9e66b9ba0a489bf95d95f /net/lapb/lapb_in.c | |
| parent | 03a000bfd7193cacefb40e309283578c6ae207b5 (diff) | |
xfrm: fix policy lookup for ipv6 gre packets
On egress side, xfrm lookup is called from __gre6_xmit() with the
fl6_gre_key field not initialized leading to policies selectors check
failure. Consequently, gre packets are sent without encryption.
On ingress side, INET6_PROTO_NOPOLICY was set, thus packets were not
checked against xfrm policies. Like for egress side, fl6_gre_key should be
correctly set, this is now done in decode_session6().
Fixes: c12b395a4664 ("gre: Support GRE over IPv6")
Cc: [email protected]
Signed-off-by: Ghalem Boudour <[email protected]>
Signed-off-by: Nicolas Dichtel <[email protected]>
Signed-off-by: Steffen Klassert <[email protected]>
Diffstat (limited to 'net/lapb/lapb_in.c')
0 files changed, 0 insertions, 0 deletions