Message ID | ba8d9777f2da2906e744cace0836dc579190ccd7.1586509561.git.lucien.xin@gmail.com |
---|---|
State | Awaiting Upstream |
Delegated to: | David Miller |
Headers | show |
Series | [ipsec] xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input | expand |
On Fri, Apr 10, 2020 at 05:06:01PM +0800, Xin Long wrote: > For beet mode, when it's ipv6 inner address with nexthdrs set, > the packet format might be: > > ---------------------------------------------------- > | outer | | dest | | | ESP | ESP | > | IP hdr | ESP | opts.| TCP | Data | Trailer | ICV | > ---------------------------------------------------- > > The nexthdr from ESP could be NEXTHDR_HOP(0), so it should > continue processing the packet when nexthdr returns 0 in > xfrm_input(). Otherwise, when ipv6 nexthdr is set, the > packet will be dropped. > > I don't see any error cases that nexthdr may return 0. So > fix it by removing the check for nexthdr == 0. > > Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") > Signed-off-by: Xin Long <lucien.xin@gmail.com> Applied, thanks!
diff --git a/net/xfrm/xfrm_input.c b/net/xfrm/xfrm_input.c index aa35f23..8a202c44 100644 --- a/net/xfrm/xfrm_input.c +++ b/net/xfrm/xfrm_input.c @@ -644,7 +644,7 @@ int xfrm_input(struct sk_buff *skb, int nexthdr, __be32 spi, int encap_type) dev_put(skb->dev); spin_lock(&x->lock); - if (nexthdr <= 0) { + if (nexthdr < 0) { if (nexthdr == -EBADMSG) { xfrm_audit_state_icvfail(x, skb, x->type->proto);
For beet mode, when it's ipv6 inner address with nexthdrs set, the packet format might be: ---------------------------------------------------- | outer | | dest | | | ESP | ESP | | IP hdr | ESP | opts.| TCP | Data | Trailer | ICV | ---------------------------------------------------- The nexthdr from ESP could be NEXTHDR_HOP(0), so it should continue processing the packet when nexthdr returns 0 in xfrm_input(). Otherwise, when ipv6 nexthdr is set, the packet will be dropped. I don't see any error cases that nexthdr may return 0. So fix it by removing the check for nexthdr == 0. Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Signed-off-by: Xin Long <lucien.xin@gmail.com> --- net/xfrm/xfrm_input.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)