Commit 02aadf72 authored Mar 28, 2011 by Steffen Klassert Committed by David S. Miller Mar 28, 2011

xfrm: Restrict extended sequence numbers to esp



The IPsec extended sequence numbers are fully implemented just for
esp. So restrict the usage to esp until other protocols have
support too.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent e2b19125

net/xfrm/xfrm_user.c

+3 −0

Original line number	Original line	Diff line number	Diff line
	@@ -127,6 +127,9 @@ static inline int verify_replay(struct xfrm_usersa_info *p,
	if (!rt)		if (!rt)
	return 0;		return 0;

			if (p->id.proto != IPPROTO_ESP)
			return -EINVAL;

	if (p->replay_window != 0)		if (p->replay_window != 0)
	return -EINVAL;		return -EINVAL;