diff options
| author | Nicolas Dichtel <nicolas.dichtel@6wind.com> | 2014-12-22 18:22:48 +0100 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2014-12-22 16:48:01 -0500 |
| commit | 2dc49d1680b534877fd20cce52557ea542bb06b6 (patch) | |
| tree | 888c8e5c7d12add3684c02010d1ef3902a35a4f5 /net/ipv6/output_core.c | |
| parent | 5ad24def21b205a8e91925cd276b0a794b5ace82 (diff) | |
tcp6: don't move IP6CB before xfrm6_policy_check()
When xfrm6_policy_check() is used, _decode_session6() is called after some
intermediate functions. This function uses IP6CB(), thus TCP_SKB_CB() must be
prepared after the call of xfrm6_policy_check().
Before this patch, scenarii with IPv6 + TCP + IPsec Transport are broken.
Fixes: 971f10eca186 ("tcp: better TCP_SKB_CB layout to reduce cache line misses")
Reported-by: Huaibin Wang <huaibin.wang@6wind.com>
Suggested-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/output_core.c')
0 files changed, 0 insertions, 0 deletions