[Intel-wired-lan] [PATCH] ixgbe: Fix secpath usage for IPsec TX offload.

David Miller davem at davemloft.net
Thu Sep 12 11:43:59 UTC 2019


From: Steffen Klassert <steffen.klassert at secunet.com>
Date: Thu, 12 Sep 2019 13:01:44 +0200

> The ixgbe driver currently does IPsec TX offloading
> based on an existing secpath. However, the secpath
> can also come from the RX side, in this case it is
> misinterpreted for TX offload and the packets are
> dropped with a "bad sa_idx" error. Fix this by using
> the xfrm_offload() function to test for TX offload.
> 
> Fixes: 592594704761 ("ixgbe: process the Tx ipsec offload")
> Reported-by: Michael Marley <michael at michaelmarley.com>
> Signed-off-by: Steffen Klassert <steffen.klassert at secunet.com>

I'll apply this directly and queue it up for -stable, thanks.


More information about the Intel-wired-lan mailing list