From: Jeff Kirsher <jeffrey.t.kirs...@intel.com> Date: Thu, 12 Sep 2019 12:07:34 -0700
> Port the same fix for ixgbe to ixgbevf. > > The ixgbevf driver currently does IPsec Tx offloading > based on an existing secpath. However, the secpath > can also come from the Rx side, in this case it is > misinterpreted for Tx offload and the packets are > dropped with a "bad sa_idx" error. Fix this by using > the xfrm_offload() function to test for Tx offload. > > CC: Shannon Nelson <snel...@pensando.io> > Fixes: 7f68d4306701 ("ixgbevf: enable VF IPsec offload operations") > Reported-by: Jonathan Tooker <jonat...@reliablehosting.com> > Signed-off-by: Jeff Kirsher <jeffrey.t.kirs...@intel.com> Applied, and like the ixgbe version of this fix I queued it up for -stable. Thanks.