Pablo Neira Ayuso <pa...@netfilter.org> wrote:
> -     if (unlikely(dst_xfrm(&rt->dst))) {
> +     rt = (struct rtable *)tuplehash->tuple.dst_cache;
> +
> +     if (unlikely(tuplehash->tuple.xmit_type == FLOW_OFFLOAD_XMIT_XFRM)) {
>               memset(skb->cb, 0, sizeof(struct inet_skb_parm));
>               IPCB(skb)->iif = skb->dev->ifindex;
>               IPCB(skb)->flags = IPSKB_FORWARDED;
>               return nf_flow_xmit_xfrm(skb, state, &rt->dst);
>       }
[..]

> +
> +     if (unlikely(tuplehash->tuple.xmit_type == FLOW_OFFLOAD_XMIT_NEIGH))

This needs to be XMIT_XFRM too.

Reply via email to