[PATCH 01/11] xfrm: Forbid state updates from changing encap type

2018-01-11 Thread Steffen Klassert
From: Herbert Xu Currently we allow state updates to competely replace the contents of x->encap. This is bad because on the user side ESP only sets up header lengths depending on encap_type once when the state is first created. This could result in the header lengths getting out of sync with th

Re: xfrm: Forbid state updates from changing encap type

2017-12-30 Thread Steffen Klassert
On Tue, Dec 26, 2017 at 05:34:44PM +1100, Herbert Xu wrote: > Currently we allow state updates to competely replace the contents > of x->encap. This is bad because on the user side ESP only sets up > header lengths depending on encap_type once when the state is first > created. This could result

xfrm: Forbid state updates from changing encap type

2017-12-25 Thread Herbert Xu
Currently we allow state updates to competely replace the contents of x->encap. This is bad because on the user side ESP only sets up header lengths depending on encap_type once when the state is first created. This could result in the header lengths getting out of sync with the actual state conf