summaryrefslogtreecommitdiff
path: root/include
diff options
context:
space:
mode:
authorEyal Birger <eyal.birger@gmail.com>2024-09-02 17:07:10 -0700
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2024-11-01 01:58:28 +0100
commitc1530660410cf3c4da7b66e0c9ee7117ef9f6c42 (patch)
treeec0b1a2772d8bda1b112c4a44b68f65f349ff673 /include
parentac1d820eaa309c7cd80f151084b8dab15a5f2034 (diff)
downloadlinux-c1530660410cf3c4da7b66e0c9ee7117ef9f6c42.tar.gz
linux-c1530660410cf3c4da7b66e0c9ee7117ef9f6c42.tar.bz2
linux-c1530660410cf3c4da7b66e0c9ee7117ef9f6c42.zip
xfrm: respect ip protocols rules criteria when performing dst lookups
[ Upstream commit b8469721034300bbb6dec5b4bf32492c95e16a0c ] The series in the "fixes" tag added the ability to consider L4 attributes in routing rules. The dst lookup on the outer packet of encapsulated traffic in the xfrm code was not adapted to this change, thus routing behavior that relies on L4 information is not respected. Pass the ip protocol information when performing dst lookups. Fixes: a25724b05af0 ("Merge branch 'fib_rules-support-sport-dport-and-proto-match'") Signed-off-by: Eyal Birger <eyal.birger@gmail.com> Tested-by: Antony Antony <antony.antony@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'include')
-rw-r--r--include/net/xfrm.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/include/net/xfrm.h b/include/net/xfrm.h
index 93207d87e1c7..93a9866ee481 100644
--- a/include/net/xfrm.h
+++ b/include/net/xfrm.h
@@ -349,6 +349,8 @@ struct xfrm_dst_lookup_params {
xfrm_address_t *saddr;
xfrm_address_t *daddr;
u32 mark;
+ __u8 ipproto;
+ union flowi_uli uli;
};
struct net_device;