netns xfrm: xfrm_policy_check in netns

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 2 insertions, 1 deletions

diff --git a/include/net/xfrm.h b/include/net/xfrm.h
index 1dc4ff0f4851..158848f55640 100644
--- a/include/net/xfrm.h
+++ b/include/net/xfrm.h
@@ -992,12 +992,13 @@ static inline int __xfrm_policy_check2(struct sock *sk, int dir,
                                        struct sk_buff *skb,
                                        unsigned int family, int reverse)
 {
+        struct net *net = dev_net(skb->dev);
         int ndir = dir | (reverse ? XFRM_POLICY_MASK + 1 : 0);
 
         if (sk && sk->sk_policy[XFRM_POLICY_IN])
                 return __xfrm_policy_check(sk, ndir, skb, family);
 
-        return  (!init_net.xfrm.policy_count[dir] && !skb->sp) ||
+        return  (!net->xfrm.policy_count[dir] && !skb->sp) ||
                 (skb->dst->flags & DST_NOPOLICY) ||
                 __xfrm_policy_check(sk, ndir, skb, family);
 }