Commit 05ab86c5 authored by Steffen Klassert's avatar Steffen Klassert

xfrm4: Invalidate all ipv4 routes on IPsec pmtu events

On IPsec pmtu events we can't access the transport headers of
the original packet, so we can't find the socket that sent
the packet. The only chance to notify the socket about the
pmtu change is to force a relookup for all routes. This
patch implenents this for the IPsec protocols.
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 5b653b2a
...@@ -420,9 +420,12 @@ static void ah4_err(struct sk_buff *skb, u32 info) ...@@ -420,9 +420,12 @@ static void ah4_err(struct sk_buff *skb, u32 info)
if (!x) if (!x)
return; return;
if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) {
atomic_inc(&flow_cache_genid);
rt_genid_bump(net);
ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_AH, 0); ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_AH, 0);
else } else
ipv4_redirect(skb, net, 0, 0, IPPROTO_AH, 0); ipv4_redirect(skb, net, 0, 0, IPPROTO_AH, 0);
xfrm_state_put(x); xfrm_state_put(x);
} }
......
...@@ -502,9 +502,12 @@ static void esp4_err(struct sk_buff *skb, u32 info) ...@@ -502,9 +502,12 @@ static void esp4_err(struct sk_buff *skb, u32 info)
if (!x) if (!x)
return; return;
if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) {
atomic_inc(&flow_cache_genid);
rt_genid_bump(net);
ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_ESP, 0); ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_ESP, 0);
else } else
ipv4_redirect(skb, net, 0, 0, IPPROTO_ESP, 0); ipv4_redirect(skb, net, 0, 0, IPPROTO_ESP, 0);
xfrm_state_put(x); xfrm_state_put(x);
} }
......
...@@ -47,9 +47,12 @@ static void ipcomp4_err(struct sk_buff *skb, u32 info) ...@@ -47,9 +47,12 @@ static void ipcomp4_err(struct sk_buff *skb, u32 info)
if (!x) if (!x)
return; return;
if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) {
atomic_inc(&flow_cache_genid);
rt_genid_bump(net);
ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_COMP, 0); ipv4_update_pmtu(skb, net, info, 0, 0, IPPROTO_COMP, 0);
else } else
ipv4_redirect(skb, net, 0, 0, IPPROTO_COMP, 0); ipv4_redirect(skb, net, 0, 0, IPPROTO_COMP, 0);
xfrm_state_put(x); xfrm_state_put(x);
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment