]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
xfrm: Fix xfrm migrate issues when address family changes
authorYan Yan <evitayan@google.com>
Wed, 19 Jan 2022 00:00:14 +0000 (16:00 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 23 Mar 2022 08:01:34 +0000 (09:01 +0100)
commitd429be3baf55aeb6400fdcaf874cd28159a4c60b
treeebd510a718f21b71cd634f28fd1d493a49e71b78
parent8a7952ec41de8f855f0cddb552cf3f5340a80482
xfrm: Fix xfrm migrate issues when address family changes

[ Upstream commit e03c3bba351f99ad932e8f06baa9da1afc418e02 ]

xfrm_migrate cannot handle address family change of an xfrm_state.
The symptons are the xfrm_state will be migrated to a wrong address,
and sending as well as receiving packets wil be broken.

This commit fixes it by breaking the original xfrm_state_clone
method into two steps so as to update the props.family before
running xfrm_init_state. As the result, xfrm_state's inner mode,
outer mode, type and IP header length in xfrm_state_migrate can
be updated with the new address family.

Tested with additions to Android's kernel unit test suite:
https://android-review.googlesource.com/c/kernel/tests/+/1885354

Signed-off-by: Yan Yan <evitayan@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/xfrm/xfrm_state.c