From: Steffen Klassert <steffen.klass...@secunet.com>
Date: Thu, 12 Sep 2019 13:01:44 +0200
> The ixgbe driver currently does IPsec TX offloading
> based on an existing secpath. However, the secpath
> can also come from the RX side, in this case it is
> misinterpreted for TX offload and the packets are
> dropped with a "bad sa_idx" error. Fix this by using
> the xfrm_offload() function to test for TX offload.
>
> Fixes: 592594704761 ("ixgbe: process the Tx ipsec offload")
> Reported-by: Michael Marley <mich...@michaelmarley.com>
> Signed-off-by: Steffen Klassert <steffen.klass...@secunet.com>
I'll apply this directly and queue it up for -stable, thanks.
