Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

Steffen Klassert says:

====================
This pull request is intended for net-next and contains the following changes:

1) Remove a redundant check when initializing the xfrm replay functions,
   from Ulrich Weber.
2) Use a faster per-cpu helper when allocating ipcomt transforms,
   from Shan Wei.
3) Use a static gc threshold value for ipv6, simmilar to what we do
   for ipv4 now.
4) Remove a commented out function call.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 6 insertions, 7 deletions

diff --git a/net/xfrm/xfrm_replay.c b/net/xfrm/xfrm_replay.c
index 3efb07d3eb27..765f6fe951eb 100644
--- a/net/xfrm/xfrm_replay.c
+++ b/net/xfrm/xfrm_replay.c
@@ -521,13 +521,12 @@ int xfrm_init_replay(struct xfrm_state *x)
                     replay_esn->bmp_len * sizeof(__u32) * 8)
                         return -EINVAL;
 
-        if ((x->props.flags & XFRM_STATE_ESN) && replay_esn->replay_window == 0)
-                return -EINVAL;
-
-        if ((x->props.flags & XFRM_STATE_ESN) && x->replay_esn)
-                x->repl = &xfrm_replay_esn;
-        else
-                x->repl = &xfrm_replay_bmp;
+                if (x->props.flags & XFRM_STATE_ESN) {
+                        if (replay_esn->replay_window == 0)
+                                return -EINVAL;
+                        x->repl = &xfrm_replay_esn;
+                } else
+                        x->repl = &xfrm_replay_bmp;
         } else
                 x->repl = &xfrm_replay_legacy;