PATCH: IPSecv6 in tunnel won't work with ext hdrs

I noticed that using extensions headers along with IPsecv6 tunnel mode did
not work in 2.5.73 + patch-2.5.73-bk3. The following patch
checks "nexthdr" instead of "iph->nexthdr" which could be an
extension header. I tested this with tunnel mode and transport mode
with and without extension headers and it worked ok.

Let me know if it is ok.

Joy Latten

-----------------------------------------------------------------------

--- xfrm6_input.c.orig	2003-06-30 11:04:31.000000000 -0500
+++ xfrm6_input.c	2003-06-30 11:09:27.000000000 -0500

@@ -67,10 +67,8 @@
 
 		xfrm_vec[xfrm_nr++].xvec = x;
 
-		iph = skb->nh.ipv6h;
-
 		if (x->props.mode) { /* XXX */
-			if (iph->nexthdr != IPPROTO_IPV6)
+			if (nexthdr != IPPROTO_IPV6)
 				goto drop;
 			skb->nh.raw = skb->data;
 			iph = skb->nh.ipv6h;

On Mon, 30 Jun 2003 latten@austin.ibm.com wrote:

Let me know if it is ok.

Looks correct to me, applied to bk://kernel.bkbits.net/jmorris/net-2.5


- James
-- 
James Morris
[off-list ref]