Hi Sabrina,
> In commit 0146dca70b87, I incorrectly adapted the code that computes
> the location of the UDP or TCP encapsulation header from IPv4 to
> IPv6. In esp6_input_done2, skb->transport_header points to the ESP
> header, so by adding skb_network_header_len, uh and th will point to
> the ESP header, not the encapsulation header that's in front of it.
>
> Since the TCP header's size can change with options, we have to start
> from the IPv6 header and walk past possible extensions.
>
> Fixes: 0146dca70b87 ("xfrm: add support for UDPv6 encapsulation of ESP")
> Fixes: 26333c37fc28 ("xfrm: add IPv6 support for espintcp")
> Reported-by: Tobias Brunner <tob...@strongswan.org>
> Signed-off-by: Sabrina Dubroca <s...@queasysnail.net>
Thanks for the fix!
Tested-by: Tobias Brunner <tob...@strongswan.org>
Regards,
Tobias
