Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4e077237 authored by Michael Rossberg's avatar Michael Rossberg Committed by Steffen Klassert
Browse files

xfrm: Fix state threshold configuration from userspace 



Allow to change the replay threshold (XFRMA_REPLAY_THRESH) and expiry
timer (XFRMA_ETIMER_THRESH) of a state without having to set other
attributes like replay counter and byte lifetime. Changing these other
values while traffic flows will break the state.

Signed-off-by: default avatarMichael Rossberg <michael.rossberg@tu-ilmenau.de>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 04a6b8bf

net/xfrm/xfrm_user.c

+3 −1
Original line number Diff line number Diff line
@@ -1928,8 +1928,10 @@ static int xfrm_new_ae(struct sk_buff *skb, struct nlmsghdr *nlh, 
	struct nlattr *rp = attrs[XFRMA_REPLAY_VAL];

	struct nlattr *re = attrs[XFRMA_REPLAY_ESN_VAL];

	struct nlattr *lt = attrs[XFRMA_LTIME_VAL];

	struct nlattr *et = attrs[XFRMA_ETIMER_THRESH];

	struct nlattr *rt = attrs[XFRMA_REPLAY_THRESH];



	if (!lt && !rp && !re)

	if (!lt && !rp && !re && !et && !rt)

		return err;



	/* pedantic mode - thou shalt sayeth replaceth */