Commit 782710e3 authored Sep 03, 2018 by Sowmini Varadhan Committed by Steffen Klassert Sep 04, 2018

xfrm: reset crypto_done when iterating over multiple input xfrms



We only support one offloaded xfrm (we do not have devices that
can handle more than one offload), so reset crypto_done in
xfrm_input() when iterating over multiple transforms in xfrm_input,
so that we can invoke the appropriate x->type->input for the
non-offloaded transforms

Fixes: d77e38e6 ("xfrm: Add an IPsec hardware offloading API")
Signed-off-by: Sowmini Varadhan <sowmini.varadhan@oracle.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

parent bfc0698b

net/xfrm/xfrm_input.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -453,6 +453,7 @@ int xfrm_input(struct sk_buff *skb, int nexthdr, __be32 spi, int encap_type)
		XFRM_INC_STATS(net, LINUX_MIB_XFRMINHDRERROR);
		goto drop;
		}
		crypto_done = false;
		} while (!err);

		err = xfrm_rcv_cb(skb, family, x->type->proto, 0);