On Wed, Dec 30, 2020 at 04:15:53PM +0000, Visa Hankala wrote:
> Use three-way comparison for address components to avoid integer
> wraparound in the result of xfrm_policy_addr_delta(). This ensures
> that the search trees are built and traversed correctly.
>
> Treat IPv4 and IPv6 similarly by returning 0 when prefixlen == 0.
> Prefix /0 has only one equivalence class.
>
> Fixes: 9cf545ebd591d ("xfrm: policy: store inexact policies in a tree ordered
> by destination address")
> Signed-off-by: Visa Hankala <[email protected]>
Applied, thanks a lot!