From: Herbert Xu <[EMAIL PROTECTED]> Date: Mon, 08 Oct 2007 19:29:39 +0800
> [IPSEC]: Move common output code to xfrm_output > > Most of the code in xfrm4_output_one and xfrm6_output_one are identical so > this patch moves them into a common xfrm_output function which will live > in net/xfrm. > > In fact this would seem to fix a bug as on IPv4 we never reset the network > header after a transform which may upset netfilter later on. > > Signed-off-by: Herbert Xu <[EMAIL PROTECTED]> Applied. Could you submit a 2.6.23 version of just the ipv4 fix? It might be interesting to determine why it was omitted, perhaps it was an oversight, and it probably predates the addition of skb_reset_*(). - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html