| commit | c5d4d7d83165ae863954b113c7f403d8b58febed | [log] [tgz] |
|---|---|---|
| author | Steffen Klassert <steffen.klassert@secunet.com> | Mon Sep 04 10:28:02 2017 +0200 |
| committer | Steffen Klassert <steffen.klassert@secunet.com> | Mon Sep 11 10:36:41 2017 +0200 |
| tree | 1f646750392b10eaa162ed8cbc3d4ba89328ba53 | |
| parent | 1f4f554a72be0d8c164c2f5bc6ba939a1c624fb4 [diff] |
xfrm: Fix deletion of offloaded SAs on failure.
When we off load a SA, it gets pushed to the NIC before we can
add it. In case of a failure, we don't delete this SA from the
NIC. Fix this by calling xfrm_dev_state_delete on failure.
Fixes: d77e38e612a0 ("xfrm: Add an IPsec hardware offloading API")
Reported-by: Shannon Nelson <shannon.nelson@oracle.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>