[IPSEC]: Fix the address family to refer encap_family
Fix the address family to refer encap_family when comparing with a kernel generated xfrm_state Signed-off-by: Kazunori MIYAZAWA <miyazawa@linux-ipv6.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Родитель
73d605d1ab
Коммит
928ba4169d
|
@ -1550,7 +1550,7 @@ xfrm_state_ok(struct xfrm_tmpl *tmpl, struct xfrm_state *x,
|
|||
unsigned short family)
|
||||
{
|
||||
if (xfrm_state_kern(x))
|
||||
return tmpl->optional && !xfrm_state_addr_cmp(tmpl, x, family);
|
||||
return tmpl->optional && !xfrm_state_addr_cmp(tmpl, x, tmpl->encap_family);
|
||||
return x->id.proto == tmpl->id.proto &&
|
||||
(x->id.spi == tmpl->id.spi || !tmpl->id.spi) &&
|
||||
(x->props.reqid == tmpl->reqid || !tmpl->reqid) &&
|
||||
|
|
Загрузка…
Ссылка в новой задаче