xfrm: replay: Fix ESN wrap around for GSO

Browse source

When using GSO it can happen that the wrong seq_hi is used for the last
packets before the wrap around. This can lead to double usage of a
sequence number. To avoid this, we should serialize this last GSO
packet.

Fixes: d7dbefc45c ("xfrm: Add xfrm_replay_overflow functions for offloading")
Co-developed-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Christian Langrock <christian.langrock@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

...

This commit is contained in:

Christian Langrock 2022-10-17 08:34:47 +02:00 • committed by Steffen Klassert

parent d83f7040e1

commit 4b549ccce9

4 changed files with 21 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

net/ipv4/esp4_offload.c

View file

3

net/ipv6/esp6_offload.c

View file

15

net/xfrm/xfrm_device.c

View file

2

net/xfrm/xfrm_replay.c

View file