projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4666faa) | patch
[IPSEC] Fix xfrm to pfkey SA state conversion
authorHerbert Xu <herbert@gondor.apana.org.au>
Sun, 19 Jun 2005 05:43:43 +0000 (22:43 -0700)
committerDavid S. Miller <davem@davemloft.net>
Sun, 19 Jun 2005 05:43:43 +0000 (22:43 -0700)
commit4f09f0bbc1cb3c74e8f2047ad4be201a059829ee
treed5ceba89f401b073cea383fa245c2b6299b7d07etree | snapshot (tar.gz zip)
parent4666faab095230ec8aa62da6c33391287f281154commit | diff
[IPSEC] Fix xfrm to pfkey SA state conversion

This patch adjusts the SA state conversion in af_key such that
XFRM_STATE_ERROR/XFRM_STATE_DEAD will be converted to SADB_STATE_DEAD
instead of SADB_STATE_DYING.

According to RFC 2367, SADB_STATE_DYING SAs can be turned into
mature ones through updating their lifetime settings.  Since SAs
which are in the states XFRM_STATE_ERROR/XFRM_STATE_DEAD cannot
be resurrected, this value is unsuitable.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
net/key/af_key.c diff | blob | blame | history
kernel source for telekom puls (alcatel/mediatek)