On Sun, Sep 02, 2018 at 04:18:42PM -0700, Sowmini Varadhan wrote: > A policy may have been set up with multiple transforms (e.g., ESP > and ipcomp). In this situation, the ingress IPsec processing > iterates in xfrm_input() and applies each transform in turn, > processing the nexthdr to find any additional xfrm that may apply. > > This patch resets the transport header back to network header > only after the last transformation so that subsequent xfrms > can find the correct transport header. > > Suggested-by: Steffen Klassert <steffen.klass...@secunet.com> > Signed-off-by: Sowmini Varadhan <sowmini.varad...@oracle.com>
This patch is a fix, so please add a proper fixes tag so that it can be backported to the stable trees. Same applied to the other patch in this series.
