]> git.hungrycats.org Git - linux/commit
[IPSEC]: Find larval SAs by sequence number
authorHerbert Xu <herbert@gondor.apana.org.au>
Fri, 10 Sep 2004 07:36:11 +0000 (00:36 -0700)
committerDavid S. Miller <davem@nuts.davemloft.net>
Fri, 10 Sep 2004 07:36:11 +0000 (00:36 -0700)
commit4d9f62e953567482223b7110c5e8961c4d494c1f
tree95d435b76ebd7b388af66a9da83782803e612f90
parent52eb5487edf194fadee57145bd19a83acb48ee07
[IPSEC]: Find larval SAs by sequence number

When larval states are generated along with ACQUIRE messages, we should
use the sequence to find the corresponding larval state when creating
states with ADD_SA or ALLOC_SPI.

If we don't do that, then it may take down an unrelated larval state
with the same parameters (think different TCP sessions).  This not only
leaves behind a larval state that shouldn't be there, it may also cause
another ACQUIRE message to be sent unnecessarily.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/xfrm.h
net/key/af_key.c
net/xfrm/xfrm_state.c
net/xfrm/xfrm_user.c