diff options
| author | Ilan Tayari <ilant@mellanox.com> | 2017-05-08 09:30:18 +0200 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2017-05-08 09:41:09 +0200 |
| commit | 2c1497bbc8fdee897341ab48ee9c9209b421b8c0 (patch) | |
| tree | a4cd705e30cf4e8757e0fa82007a2be50a3ea798 /net/xfrm/xfrm_output.c | |
| parent | af_key: Fix slab-out-of-bounds in pfkey_compile_policy. (diff) | |
| download | linux-2c1497bbc8fdee897341ab48ee9c9209b421b8c0.tar.xz linux-2c1497bbc8fdee897341ab48ee9c9209b421b8c0.zip | |
xfrm: Fix NETDEV_DOWN with IPSec offload
Upon NETDEV_DOWN event, all xfrm_state objects which are bound to
the device are flushed.
The condition for this is wrong, though, testing dev->hw_features
instead of dev->features. If a device has non-user-modifiable
NETIF_F_HW_ESP, then its xfrm_state objects are not flushed,
causing a crash later on after the device is deleted.
Check dev->features instead of dev->hw_features.
Fixes: d77e38e612a0 ("xfrm: Add an IPsec hardware offloading API")
Signed-off-by: Ilan Tayari <ilant@mellanox.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'net/xfrm/xfrm_output.c')
0 files changed, 0 insertions, 0 deletions