From 6963351e7653a6b82c1591bc1172e5f7be594c5e Mon Sep 17 00:00:00 2001
From: James Morris <jmorris@intercode.com.au>
Date: Tue, 8 Apr 2003 02:16:17 -0700
Subject: [PATCH] [IPSEC]: Support for optional policies on input got lost.

---
 net/xfrm/xfrm_policy.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
index b0460abbde2d0..321858bf3af23 100644
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -963,6 +963,8 @@ int __xfrm_policy_check(struct sock *sk, int dir, struct sk_buff *skb,
 			 * are implied between each two transformations.
 			 */
 			for (i = pol->xfrm_nr-1, k = 0; i >= 0; i--) {
+				if (pol->xfrm_vec[i].optional)
+					continue;
 				k = xfrm_policy_ok(pol->xfrm_vec+i, sp, k, family);
 				if (k < 0)
 					goto reject;
-- 
2.53.0