| Message ID | 20110426054023.GG5495@secunet.com |
|---|---|
| State | Accepted, archived |
| Delegated to: | David Miller |
| Headers | show |
On Tue, Apr 26, 2011 at 07:40:23AM +0200, Steffen Klassert wrote: > When we use IPsec extended sequence numbers, we may overwrite > the last scatterlist of the associated data by the scatterlist > for the skb. This patch fixes this by placing the scatterlist > for the skb right behind the last scatterlist of the associated > data. esp4 does it already like that. > > Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
From: Herbert Xu <herbert@gondor.apana.org.au> Date: Tue, 26 Apr 2011 15:41:58 +1000 > On Tue, Apr 26, 2011 at 07:40:23AM +0200, Steffen Klassert wrote: >> When we use IPsec extended sequence numbers, we may overwrite >> the last scatterlist of the associated data by the scatterlist >> for the skb. This patch fixes this by placing the scatterlist >> for the skb right behind the last scatterlist of the associated >> data. esp4 does it already like that. >> >> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> > > Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Applied. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c index 5aa8ec8..59dccfb 100644 --- a/net/ipv6/esp6.c +++ b/net/ipv6/esp6.c @@ -371,7 +371,7 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb) iv = esp_tmp_iv(aead, tmp, seqhilen); req = esp_tmp_req(aead, iv); asg = esp_req_sg(aead, req); - sg = asg + 1; + sg = asg + sglists; skb->ip_summed = CHECKSUM_NONE;
When we use IPsec extended sequence numbers, we may overwrite the last scatterlist of the associated data by the scatterlist for the skb. This patch fixes this by placing the scatterlist for the skb right behind the last scatterlist of the associated data. esp4 does it already like that. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> --- net/ipv6/esp6.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)