Re: [PATCH] xfrm_user: propagate sec ctx allocation errors

2016-09-09 Thread Steffen Klassert
On Thu, Sep 08, 2016 at 06:09:57PM +0200, Mathias Krause wrote: > When we fail to attach the security context in xfrm_state_construct() > we'll return 0 as error value which, in turn, will wrongly claim success > to userland when, in fact, we won't be adding / updating the XFRM state. > > This is

[PATCH] xfrm_user: propagate sec ctx allocation errors

2016-09-08 Thread Mathias Krause
When we fail to attach the security context in xfrm_state_construct() we'll return 0 as error value which, in turn, will wrongly claim success to userland when, in fact, we won't be adding / updating the XFRM state. This is a regression introduced by commit fd21150a0fe1 ("[XFRM] netlink: Inline at