Home Explore Help
Register Sign In
phyus
/
linux-vybrid_public
8
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

xfrm: Decode sessions with output interface.

The output interface matching does not work on forward
policy lookups, the output interface of the flowi is
always 0. Fix this by setting the output interface when
we decode the session.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Steffen Klassert 12 years ago
parent
4479ff76c4
commit
bafd4bd4dc
2 changed files with 2 additions and 0 deletions
Split View Show Diff Stats
  1. 1 0
      net/ipv4/xfrm4_policy.c
  2. 1 0
      net/ipv6/xfrm6_policy.c

+ 1 - 0
net/ipv4/xfrm4_policy.c
View File 

@@ -107,6 +107,7 @@ _decode_session4(struct sk_buff *skb, struct flowi *fl, int reverse)
 
 
 	memset(fl4, 0, sizeof(struct flowi4));
 
 	fl4->flowi4_mark = skb->mark;
 
+	fl4->flowi4_oif = skb_dst(skb)->dev->ifindex;
 
 
 	if (!ip_is_fragment(iph)) {
 
 		switch (iph->protocol) {

+ 1 - 0
net/ipv6/xfrm6_policy.c
View File 

@@ -138,6 +138,7 @@ _decode_session6(struct sk_buff *skb, struct flowi *fl, int reverse)
 
 
 	memset(fl6, 0, sizeof(struct flowi6));
 
 	fl6->flowi6_mark = skb->mark;
 
+	fl6->flowi6_oif = skb_dst(skb)->dev->ifindex;
 
 
 	fl6->daddr = reverse ? hdr->saddr : hdr->daddr;
 
 	fl6->saddr = reverse ? hdr->daddr : hdr->saddr;