Commit c0a56e64 authored Apr 25, 2011 by Steffen Klassert Committed by David S. Miller Apr 26, 2011

esp6: Fix scatterlist initialization



When we use IPsec extended sequence numbers, we may overwrite
the last scatterlist of the associated data by the scatterlist
for the skb. This patch fixes this by placing the scatterlist
for the skb right behind the last scatterlist of the associated
data. esp4 does it already like that.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 3f602b08

net/ipv6/esp6.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -371,7 +371,7 @@ static int esp6_input(struct xfrm_state x, struct sk_buff skb)
		iv = esp_tmp_iv(aead, tmp, seqhilen);
		req = esp_tmp_req(aead, iv);
		asg = esp_req_sg(aead, req);
		sg = asg + 1;
		sg = asg + sglists;

		skb->ip_summed = CHECKSUM_NONE;

Admin message