diff options
| author | Ghalem Boudour <ghalem.boudour@6wind.com> | 2021-11-19 18:20:16 +0100 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2021-11-23 10:12:21 +0100 |
| commit | bcf141b2eb551b3477b24997ebc09c65f117a803 (patch) | |
| tree | b4f482db1463cfdd01d9e66b9ba0a489bf95d95f /COPYING | |
| parent | 03a000bfd7193cacefb40e309283578c6ae207b5 (diff) | |
| download | linux-bcf141b2eb551b3477b24997ebc09c65f117a803.tar.bz2 | |
xfrm: fix policy lookup for ipv6 gre packets
On egress side, xfrm lookup is called from __gre6_xmit() with the
fl6_gre_key field not initialized leading to policies selectors check
failure. Consequently, gre packets are sent without encryption.
On ingress side, INET6_PROTO_NOPOLICY was set, thus packets were not
checked against xfrm policies. Like for egress side, fl6_gre_key should be
correctly set, this is now done in decode_session6().
Fixes: c12b395a4664 ("gre: Support GRE over IPv6")
Cc: stable@vger.kernel.org
Signed-off-by: Ghalem Boudour <ghalem.boudour@6wind.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions