Messages in this thread | | | Date | Fri, 21 Oct 2022 11:11:27 +0200 | From | Steffen Klassert <> | Subject | Re: [PATCH ipsec v7] xfrm: replay: Fix ESN wrap around for GSO |
| |
On Mon, Oct 17, 2022 at 08:34:47AM +0200, Christian Langrock wrote: > When using GSO it can happen that the wrong seq_hi is used for the last > packets before the wrap around. This can lead to double usage of a > sequence number. To avoid this, we should serialize this last GSO > packet. > > Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_replay_overflow functions for offloading") > Co-developed-by: Steffen Klassert <steffen.klassert@secunet.com> > Signed-off-by: Christian Langrock <christian.langrock@secunet.com>
Applied, thanks a lot Christian!
| |