On Thu, 2019-09-12 at 13:43 +0200, David Miller wrote: > From: Steffen Klassert <steffen.klass...@secunet.com> > Date: Thu, 12 Sep 2019 13:01:44 +0200 > > > The ixgbe driver currently does IPsec TX offloading > > based on an existing secpath. However, the secpath > > can also come from the RX side, in this case it is > > misinterpreted for TX offload and the packets are > > dropped with a "bad sa_idx" error. Fix this by using > > the xfrm_offload() function to test for TX offload. > > > > Fixes: 592594704761 ("ixgbe: process the Tx ipsec offload") > > Reported-by: Michael Marley <mich...@michaelmarley.com> > > Signed-off-by: Steffen Klassert <steffen.klass...@secunet.com> > > I'll apply this directly and queue it up for -stable, thanks.
Thanks Dave!
signature.asc
Description: This is a digitally signed message part