The fast path updates cheers, jamal
This patch adds the sequence updates that will generate ipsec async events
Signed-off-by: Jamal Hadi Salim <[EMAIL PROTECTED]> --- net/ipv4/ah4.c | 2 ++ net/ipv4/esp4.c | 2 ++ net/ipv6/ah6.c | 2 ++ net/ipv6/esp6.c | 2 ++ 4 files changed, 8 insertions(+), 0 deletions(-) diff --git a/net/ipv4/ah4.c b/net/ipv4/ah4.c index aed537f..a11c299 100644 --- a/net/ipv4/ah4.c +++ b/net/ipv4/ah4.c @@ -97,6 +97,8 @@ static int ah_output(struct xfrm_state * ah->reserved = 0; ah->spi = x->id.spi; ah->seq_no = htonl(++x->replay.oseq); + if (sysctl_xfrm_aevent_on) + xfrm_replay_notify(x, XFRM_REPLAY_UPDATE); ahp->icv(ahp, skb, ah->auth_data); top_iph->tos = iph->tos; diff --git a/net/ipv4/esp4.c b/net/ipv4/esp4.c index 73bfcae..233747d 100644 --- a/net/ipv4/esp4.c +++ b/net/ipv4/esp4.c @@ -97,6 +97,8 @@ static int esp_output(struct xfrm_state esph->spi = x->id.spi; esph->seq_no = htonl(++x->replay.oseq); + if (sysctl_xfrm_aevent_on) + xfrm_replay_notify(x, XFRM_REPLAY_UPDATE); if (esp->conf.ivlen) crypto_cipher_set_iv(tfm, esp->conf.ivec, crypto_tfm_alg_ivsize(tfm)); diff --git a/net/ipv6/ah6.c b/net/ipv6/ah6.c index c7932cb..51dc513 100644 --- a/net/ipv6/ah6.c +++ b/net/ipv6/ah6.c @@ -213,6 +213,8 @@ static int ah6_output(struct xfrm_state ah->reserved = 0; ah->spi = x->id.spi; ah->seq_no = htonl(++x->replay.oseq); + if (sysctl_xfrm_aevent_on) + xfrm_replay_notify(x, XFRM_REPLAY_UPDATE); ahp->icv(ahp, skb, ah->auth_data); err = 0; diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c index 7b5b94f..43f3d98 100644 --- a/net/ipv6/esp6.c +++ b/net/ipv6/esp6.c @@ -94,6 +94,8 @@ static int esp6_output(struct xfrm_state esph->spi = x->id.spi; esph->seq_no = htonl(++x->replay.oseq); + if (sysctl_xfrm_aevent_on) + xfrm_replay_notify(x, XFRM_REPLAY_UPDATE); if (esp->conf.ivlen) crypto_cipher_set_iv(tfm, esp->conf.ivec, crypto_tfm_alg_ivsize(tfm));