Commit fafeeb6c authored Jun 01, 2010 by Eric Dumazet Committed by David S. Miller Jun 02, 2010

xfrm: force a dst reference in __xfrm_route_forward()



Packets going through __xfrm_route_forward() have a not refcounted dst
entry, since we enabled a noref forwarding path.

xfrm_lookup() might incorrectly release this dst entry.

It's a bit late to make invasive changes in xfrm_lookup(), so lets force
a refcount in this path.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent b42d9165

net/xfrm/xfrm_policy.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -2153,6 +2153,7 @@ int __xfrm_route_forward(struct sk_buff *skb, unsigned short family)
		return 0;
		}

		skb_dst_force(skb);
		dst = skb_dst(skb);

		res = xfrm_lookup(net, &dst, &fl, NULL, 0) == 0;