Skip to content

Commit 52783ad

Browse files
tobiasbrunnergregkh
authored andcommitted
esp6: Fix integrity verification when ESN are used
commit a55e23864d381c5a4ef110df94b00b2fe121a70d upstream. When handling inbound packets, the two halves of the sequence number stored on the skb are already in network order. Fixes: 000ae7b ("esp6: Switch to new AEAD interface") Signed-off-by: Tobias Brunner <tobias@strongswan.org> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 3bf28ce commit 52783ad

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

net/ipv6/esp6.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -418,7 +418,7 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb)
418418
esph = (void *)skb_push(skb, 4);
419419
*seqhi = esph->spi;
420420
esph->spi = esph->seq_no;
421-
esph->seq_no = htonl(XFRM_SKB_CB(skb)->seq.input.hi);
421+
esph->seq_no = XFRM_SKB_CB(skb)->seq.input.hi;
422422
aead_request_set_callback(req, 0, esp_input_done_esn, skb);
423423
}
424424

0 commit comments

Comments
 (0)