Commit c04ff9bd authored by Herbert Xu's avatar Herbert Xu Committed by sanglipeng
Browse files

xfrm: Allow transport-mode states with AF_UNSPEC selector

stable inclusion
from stable-v5.10.176
commit 0da0b816972a88dc82431586cb2c1e85876f9c77
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I87BGI

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0da0b816972a88dc82431586cb2c1e85876f9c77



--------------------------------

[ Upstream commit c276a706 ]

xfrm state selectors are matched against the inner-most flow
which can be of any address family.  Therefore middle states
in nested configurations need to carry a wildcard selector in
order to work at all.

However, this is currently forbidden for transport-mode states.

Fix this by removing the unnecessary check.

Fixes: 13996378 ("[IPSEC]: Rename mode to outer_mode and add inner_mode")
Reported-by: default avatarDavid George <David.George@sophos.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarsanglipeng <sanglipeng1@jd.com>
parent f6603b4a
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment