diff options
| author | David Ahern <dsahern@gmail.com> | 2020-04-22 02:48:27 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2020-04-23 05:30:38 +0300 |
| commit | a53c102872ad6e34e1518e25899dc9498c27f8b1 (patch) | |
| tree | 9099bbd0906f4f6c49da0ca03fcb655413e69c8c /drivers/net | |
| parent | 5cc4adbcfcad8a85fb19216c53bfc4e9fd9f6c7d (diff) | |
| download | linux-a53c102872ad6e34e1518e25899dc9498c27f8b1.tar.xz | |
vrf: Fix IPv6 with qdisc and xfrm
When a qdisc is attached to the VRF device, the packet goes down the ndo
xmit function which is setup to send the packet back to the VRF driver
which does a lookup to send the packet out. The lookup in the VRF driver
is not considering xfrm policies. Change it to use ip6_dst_lookup_flow
rather than ip6_route_output.
Fixes: 35402e313663 ("net: Add IPv6 support to VRF device")
Signed-off-by: David Ahern <dsahern@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net')
| -rw-r--r-- | drivers/net/vrf.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/net/vrf.c b/drivers/net/vrf.c index 6f5d03b7d9c0..56f8aab46f89 100644 --- a/drivers/net/vrf.c +++ b/drivers/net/vrf.c @@ -188,8 +188,8 @@ static netdev_tx_t vrf_process_v6_outbound(struct sk_buff *skb, fl6.flowi6_proto = iph->nexthdr; fl6.flowi6_flags = FLOWI_FLAG_SKIP_NH_OIF; - dst = ip6_route_output(net, NULL, &fl6); - if (dst == dst_null) + dst = ip6_dst_lookup_flow(net, NULL, &fl6, NULL); + if (IS_ERR(dst) || dst == dst_null) goto err; skb_dst_drop(skb); |