diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2011-03-08 00:10:27 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2011-03-13 20:22:31 -0700 |
| commit | d8647b79c3b7e223ac051439d165bc8e7bbb832f (patch) | |
| tree | c3d0e377c77f4c0c138c339c3ac0c66dbb1d232b /net/xfrm/xfrm_state.c | |
| parent | 2cd084678fc1eb75aec4f7ae3d339d232c00ec61 (diff) | |
xfrm: Add user interface for esn and big anti-replay windows
This patch adds a netlink based user interface to configure
esn and big anti-replay windows. The new netlink attribute
XFRMA_REPLAY_ESN_VAL is used to configure the new implementation.
If the XFRM_STATE_ESN flag is set, we use esn and support for big
anti-replay windows for the configured state. If this flag is not
set we use the new implementation with 32 bit sequence numbers.
A big anti-replay window can be configured in this case anyway.
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/xfrm/xfrm_state.c')
| -rw-r--r-- | net/xfrm/xfrm_state.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c index 23779d19fe0..d575f053486 100644 --- a/net/xfrm/xfrm_state.c +++ b/net/xfrm/xfrm_state.c @@ -356,6 +356,8 @@ static void xfrm_state_gc_destroy(struct xfrm_state *x) kfree(x->calg); kfree(x->encap); kfree(x->coaddr); + kfree(x->replay_esn); + kfree(x->preplay_esn); if (x->inner_mode) xfrm_put_mode(x->inner_mode); if (x->inner_mode_iaf) |