]> git.baikalelectronics.ru Git - kernel.git/commit
ipsec: Fix bogus bundle flowi
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 2 Mar 2010 02:51:56 +0000 (02:51 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 3 Mar 2010 09:04:37 +0000 (01:04 -0800)
commitdc886272296ec0e2950cf1bed997808d650d7482
tree4e30c4d60c21ab5e0346648ed852258a96265288
parent705e72660b2966d47c6e2724413e14e44684b528
ipsec: Fix bogus bundle flowi

When I merged the bundle creation code, I introduced a bogus
flowi value in the bundle.  Instead of getting from the caller,
it was instead set to the flow in the route object, which is
totally different.

The end result is that the bundles we created never match, and
we instead end up with an ever growing bundle list.

Thanks to Jamal for find this problem.

Reported-by: Jamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Acked-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Jamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/xfrm.h
net/ipv4/xfrm4_policy.c
net/ipv6/xfrm6_policy.c
net/xfrm/xfrm_policy.c