Re: [PATCH net v2] xfrm: Clear sk_dst_cache when applying per-socket policy.

2017-10-26 Thread Steffen Klassert
On Wed, Oct 25, 2017 at 09:52:27AM -0700, Jonathan Basseri wrote: > If a socket has a valid dst cache, then xfrm_lookup_route will get > skipped. However, the cache is not invalidated when applying policy to a > socket (i.e. IPV6_XFRM_POLICY). The result is that new policies are > sometimes ignored

[PATCH net v2] xfrm: Clear sk_dst_cache when applying per-socket policy.

2017-10-25 Thread Jonathan Basseri
If a socket has a valid dst cache, then xfrm_lookup_route will get skipped. However, the cache is not invalidated when applying policy to a socket (i.e. IPV6_XFRM_POLICY). The result is that new policies are sometimes ignored on those sockets. (Note: This was broken for IPv4 and IPv6 at different t