Commit 87c1e12b authored by Herbert Xu's avatar Herbert Xu Committed by David S. Miller

ipsec: Fix bogus bundle flowi

When I merged the bundle creation code, I introduced a bogus
flowi value in the bundle.  Instead of getting from the caller,
it was instead set to the flow in the route object, which is
totally different.

The end result is that the bundles we created never match, and
we instead end up with an ever growing bundle list.

Thanks to Jamal for find this problem.
Reported-by: default avatarJamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Acked-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
Acked-by: default avatarJamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 3a5b27bf
...@@ -275,7 +275,8 @@ struct xfrm_policy_afinfo { ...@@ -275,7 +275,8 @@ struct xfrm_policy_afinfo {
struct dst_entry *dst, struct dst_entry *dst,
int nfheader_len); int nfheader_len);
int (*fill_dst)(struct xfrm_dst *xdst, int (*fill_dst)(struct xfrm_dst *xdst,
struct net_device *dev); struct net_device *dev,
struct flowi *fl);
}; };
extern int xfrm_policy_register_afinfo(struct xfrm_policy_afinfo *afinfo); extern int xfrm_policy_register_afinfo(struct xfrm_policy_afinfo *afinfo);
......
...@@ -91,11 +91,12 @@ static int xfrm4_init_path(struct xfrm_dst *path, struct dst_entry *dst, ...@@ -91,11 +91,12 @@ static int xfrm4_init_path(struct xfrm_dst *path, struct dst_entry *dst,
return 0; return 0;
} }
static int xfrm4_fill_dst(struct xfrm_dst *xdst, struct net_device *dev) static int xfrm4_fill_dst(struct xfrm_dst *xdst, struct net_device *dev,
struct flowi *fl)
{ {
struct rtable *rt = (struct rtable *)xdst->route; struct rtable *rt = (struct rtable *)xdst->route;
xdst->u.rt.fl = rt->fl; xdst->u.rt.fl = *fl;
xdst->u.dst.dev = dev; xdst->u.dst.dev = dev;
dev_hold(dev); dev_hold(dev);
......
...@@ -116,7 +116,8 @@ static int xfrm6_init_path(struct xfrm_dst *path, struct dst_entry *dst, ...@@ -116,7 +116,8 @@ static int xfrm6_init_path(struct xfrm_dst *path, struct dst_entry *dst,
return 0; return 0;
} }
static int xfrm6_fill_dst(struct xfrm_dst *xdst, struct net_device *dev) static int xfrm6_fill_dst(struct xfrm_dst *xdst, struct net_device *dev,
struct flowi *fl)
{ {
struct rt6_info *rt = (struct rt6_info*)xdst->route; struct rt6_info *rt = (struct rt6_info*)xdst->route;
......
...@@ -1372,7 +1372,8 @@ static inline int xfrm_init_path(struct xfrm_dst *path, struct dst_entry *dst, ...@@ -1372,7 +1372,8 @@ static inline int xfrm_init_path(struct xfrm_dst *path, struct dst_entry *dst,
return err; return err;
} }
static inline int xfrm_fill_dst(struct xfrm_dst *xdst, struct net_device *dev) static inline int xfrm_fill_dst(struct xfrm_dst *xdst, struct net_device *dev,
struct flowi *fl)
{ {
struct xfrm_policy_afinfo *afinfo = struct xfrm_policy_afinfo *afinfo =
xfrm_policy_get_afinfo(xdst->u.dst.ops->family); xfrm_policy_get_afinfo(xdst->u.dst.ops->family);
...@@ -1381,7 +1382,7 @@ static inline int xfrm_fill_dst(struct xfrm_dst *xdst, struct net_device *dev) ...@@ -1381,7 +1382,7 @@ static inline int xfrm_fill_dst(struct xfrm_dst *xdst, struct net_device *dev)
if (!afinfo) if (!afinfo)
return -EINVAL; return -EINVAL;
err = afinfo->fill_dst(xdst, dev); err = afinfo->fill_dst(xdst, dev, fl);
xfrm_policy_put_afinfo(afinfo); xfrm_policy_put_afinfo(afinfo);
...@@ -1486,7 +1487,7 @@ static struct dst_entry *xfrm_bundle_create(struct xfrm_policy *policy, ...@@ -1486,7 +1487,7 @@ static struct dst_entry *xfrm_bundle_create(struct xfrm_policy *policy,
for (dst_prev = dst0; dst_prev != dst; dst_prev = dst_prev->child) { for (dst_prev = dst0; dst_prev != dst; dst_prev = dst_prev->child) {
struct xfrm_dst *xdst = (struct xfrm_dst *)dst_prev; struct xfrm_dst *xdst = (struct xfrm_dst *)dst_prev;
err = xfrm_fill_dst(xdst, dev); err = xfrm_fill_dst(xdst, dev, fl);
if (err) if (err)
goto free_dst; goto free_dst;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment