Re: [PATCH ipsec v2] xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2021-03-30 05:28:47
On Fri, Mar 26, 2021 at 09:44:48AM +0100, Steffen Klassert wrote:
Commit 94579ac3f6d0 ("xfrm: Fix double ESP trailer insertion in IPsec
crypto offload.") added a XFRM_XMIT flag to avoid duplicate ESP trailer
insertion on HW offload. This flag is set on the secpath that is shared
amongst segments. This lead to a situation where some segments are
not transformed correctly when segmentation happens at layer 3.
Fix this by using private skb extensions for segmented and hw offloaded
ESP packets.
Fixes: 94579ac3f6d0 ("xfrm: Fix double ESP trailer insertion in IPsec crypto offload.")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>Now applied to the ipsec tree.