diff options
author | thomas.zeitlhofer+lkml@ze-it.at <thomas.zeitlhofer+lkml@ze-it.at> | 2016-09-07 20:40:38 +0200 |
---|---|---|
committer | Steffen Klassert <steffen.klassert@secunet.com> | 2016-09-09 09:02:08 +0200 |
commit | 1fb81e09d487656aa23f2acb1232c7f56b4c2367 (patch) | |
tree | 72a7c89c15f827148d5eab8a1136aa565a7f4988 /net/xfrm | |
parent | 2f30ea5090cbc57ea573cdc66421264b3de3fb0a (diff) | |
download | linux-1fb81e09d487656aa23f2acb1232c7f56b4c2367.tar.bz2 |
vti: use right inner_mode for inbound inter address family policy checks
In case of inter address family tunneling (IPv6 over vti4 or IPv4 over
vti6), the inbound policy checks in vti_rcv_cb() and vti6_rcv_cb() are
using the wrong address family. As a result, all inbound inter address
family traffic is dropped.
Use the xfrm_ip2inner_mode() helper, as done in xfrm_input() (i.e., also
increment LINUX_MIB_XFRMINSTATEMODEERROR in case of error), to select the
inner_mode that contains the right address family for the inbound policy
checks.
Signed-off-by: Thomas Zeitlhofer <thomas.zeitlhofer+lkml@ze-it.at>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'net/xfrm')
0 files changed, 0 insertions, 0 deletions