diff options
| author | Eyal Birger <[email protected]> | 2020-12-23 15:00:46 +0000 |
|---|---|---|
| committer | Steffen Klassert <[email protected]> | 2021-01-04 09:04:05 +0000 |
| commit | 9f8550e4bd9d78a8436c2061ad2530215f875376 (patch) | |
| tree | 88193f82af8ada4e1470aecd4ef5395454a10638 /net/lapb/lapb_out.c | |
| parent | xfrm: Fix oops in xfrm_replay_advance_bmp (diff) | |
| download | kernel-9f8550e4bd9d78a8436c2061ad2530215f875376.tar.gz kernel-9f8550e4bd9d78a8436c2061ad2530215f875376.zip | |
xfrm: fix disable_xfrm sysctl when used on xfrm interfaces
The disable_xfrm flag signals that xfrm should not be performed during
routing towards a device before reaching device xmit.
For xfrm interfaces this is usually desired as they perform the outbound
policy lookup as part of their xmit using their if_id.
Before this change enabling this flag on xfrm interfaces prevented them
from xmitting as xfrm_lookup_with_ifid() would not perform a policy lookup
in case the original dst had the DST_NOXFRM flag.
This optimization is incorrect when the lookup is done by the xfrm
interface xmit logic.
Fix by performing policy lookup when invoked by xfrmi as if_id != 0.
Similarly it's unlikely for the 'no policy exists on net' check to yield
any performance benefits when invoked from xfrmi.
Fixes: f203b76d7809 ("xfrm: Add virtual xfrm interfaces")
Signed-off-by: Eyal Birger <[email protected]>
Signed-off-by: Steffen Klassert <[email protected]>
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions