Commit f7fe25a6 authored Oct 21, 2022 by Antony Antony Committed by Steffen Klassert Oct 25, 2022

xfrm: update x->lastused for every packet



x->lastused was only updated for outgoing mobile IPv6 packet.
With this fix update it for every, in and out, packet.

This is useful to check if the a SA is still in use, or when was
the last time an SA was used. lastused time of in SA can used
to check IPsec path is functional.

Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

parent e91001ba

net/xfrm/xfrm_input.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -671,6 +671,7 @@ int xfrm_input(struct sk_buff *skb, int nexthdr, __be32 spi, int encap_type)

		x->curlft.bytes += skb->len;
		x->curlft.packets++;
		x->lastused = ktime_get_real_seconds();

		spin_unlock(&x->lock);

net/xfrm/xfrm_output.c

+1 −2

Original line number	Diff line number	Diff line
		@@ -209,8 +209,6 @@ static int xfrm6_ro_output(struct xfrm_state x, struct sk_buff skb)
		__skb_pull(skb, hdr_len);
		memmove(ipv6_hdr(skb), iph, hdr_len);

		x->lastused = ktime_get_real_seconds();

		return 0;
		#else
		WARN_ON_ONCE(1);
		@@ -534,6 +532,7 @@ static int xfrm_output_one(struct sk_buff *skb, int err)

		x->curlft.bytes += skb->len;
		x->curlft.packets++;
		x->lastused = ktime_get_real_seconds();

		spin_unlock_bh(&x->lock);