Commit 6f115638 authored Sep 23, 2013 by Fan Du Committed by Steffen Klassert Oct 01, 2013

xfrm: Force SA to be lookup again if SA in acquire state



If SA is in the process of acquiring, which indicates this SA is more
promising and precise than the fall back option, i.e. using wild card
source address for searching less suitable SA.

So, here bail out, and try again.

Signed-off-by: Fan Du <fan.du@windriver.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

parent b3241870

net/xfrm/xfrm_state.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -815,7 +815,7 @@ xfrm_state_find(const xfrm_address_t daddr, const xfrm_address_t saddr,
		xfrm_state_look_at(pol, x, fl, encap_family,
		&best, &acquire_in_progress, &error);
		}
		if (best)
		if (best \|\| acquire_in_progress)
		goto found;

		h_wildcard = xfrm_dst_hash(net, daddr, &saddr_wildcard, tmpl->reqid, encap_family);

Admin message