[IPSEC]: Return EOVERFLOW when output sequence number overflows
Previously we made it an error on the output path if the sequence number overflowed. However we did not set the err variable accordingly. This patch sets err to -EOVERFLOW in that case. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
9a429c4983
commit
dbb1db8b59
|
@ -66,6 +66,7 @@ static int xfrm_output_one(struct sk_buff *skb, int err)
|
||||||
if (unlikely(x->replay.oseq == 0)) {
|
if (unlikely(x->replay.oseq == 0)) {
|
||||||
x->replay.oseq--;
|
x->replay.oseq--;
|
||||||
xfrm_audit_state_replay_overflow(x, skb);
|
xfrm_audit_state_replay_overflow(x, skb);
|
||||||
|
err = -EOVERFLOW;
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
if (xfrm_aevent_is_on())
|
if (xfrm_aevent_is_on())
|
||||||
|
|
Loading…
Reference in New Issue