Re: IPsecv6 integrity failures not dropped

From: David S. Miller (davem@redhat.com)
Date: Fri Apr 18 2003 - 16:10:14 EST


   From: latten@austin.ibm.com
   Date: Fri, 18 Apr 2003 15:17:04 -0500

   I modified ah6_input() and esp6_input() to return zero instead of -EINVAL
   in the fix below. I tested it and it works.
   
   Please let me know if this is ok.

I think it would be better if ipv6's upper-layer interface worked
like ipv4's. ie. a < 0 return value means:

        next_proto =- ret;
        goto resubmit;

The less that is different between ipv4/ipv6 the better.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Apr 23 2003 - 22:00:25 EST