diff options
| author | huizhang <huizhang@marvell.com> | 2014-06-09 00:37:25 -0400 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-06-11 03:47:31 -0400 |
| commit | f6c20c596f41fe6331cee2053b270bf12142b04e (patch) | |
| tree | 8465b77d7c1b2e08a012e7a772a839593a7f7280 /crypto/xcbc.c | |
| parent | 5ce54af1fc9d2718d46c9fd92a161379fb197266 (diff) | |
net: ipv6: Fixed up ipsec packet be re-routing issue
Bug report on https://bugzilla.kernel.org/show_bug.cgi?id=75781
When a local output ipsec packet match the mangle table rule,
and be set mark value, the packet will be route again in
route_me_harder -> _session_decoder6
In this case, the nhoff in CB of skb was still the default
value 0. So the protocal match can't success and the packet can't match
correct SA rule,and then the packet be send out in plaintext.
To fixed up the issue. The CB->nhoff must be set.
Signed-off-by: Hui Zhang <huizhang@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'crypto/xcbc.c')
0 files changed, 0 insertions, 0 deletions