diff options
| author |   thomas.zeitlhofer+lkml@ze-it.at <thomas.zeitlhofer+lkml@ze-it.at> | 2016-09-07 20:40:38 +0200 |
|---|---|---|
| committer |   Steffen Klassert <steffen.klassert@secunet.com> | 2016-09-09 09:02:08 +0200 |
| commit | 1fb81e09d487656aa23f2acb1232c7f56b4c2367 (patch) | |
| tree | 72a7c89c15f827148d5eab8a1136aa565a7f4988 /samples | |
| parent | xfrm_user: propagate sec ctx allocation errors (diff) | |
| download | linux-dev-1fb81e09d487656aa23f2acb1232c7f56b4c2367.tar.xz linux-dev-1fb81e09d487656aa23f2acb1232c7f56b4c2367.zip | |
vti: use right inner_mode for inbound inter address family policy checks
In case of inter address family tunneling (IPv6 over vti4 or IPv4 over
vti6), the inbound policy checks in vti_rcv_cb() and vti6_rcv_cb() are
using the wrong address family. As a result, all inbound inter address
family traffic is dropped.
Use the xfrm_ip2inner_mode() helper, as done in xfrm_input() (i.e., also
increment LINUX_MIB_XFRMINSTATEMODEERROR in case of error), to select the
inner_mode that contains the right address family for the inbound policy
checks.
Signed-off-by: Thomas Zeitlhofer <thomas.zeitlhofer+lkml@ze-it.at>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'samples')
0 files changed, 0 insertions, 0 deletions