Re: [PATCH ipsec v7] xfrm: replay: Fix ESN wrap around for GSO

From: Steffen Klassert
Date: Fri Oct 21 2022 - 05:13:27 EST


On Mon, Oct 17, 2022 at 08:34:47AM +0200, Christian Langrock wrote:
> When using GSO it can happen that the wrong seq_hi is used for the last
> packets before the wrap around. This can lead to double usage of a
> sequence number. To avoid this, we should serialize this last GSO
> packet.
>
> Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_replay_overflow functions for offloading")
> Co-developed-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
> Signed-off-by: Christian Langrock <christian.langrock@xxxxxxxxxxx>

Applied, thanks a lot Christian!