Re: [PATCH net-next 1/3] xfrm: Fix xfrm_replay_overflow_offload_esn

[Steffen Klassert]

On Tue, Nov 28, 2017 at 11:49:28AM +0200, yossefe@xxxxxxxxxxxx wrote:
> From: Yossef Efraim <yossefe@xxxxxxxxxxxx>
> 
> In case of wrap around, replay_esn->oseq_hi is not updated
> before it is tested for it's actual value, leading function
> to fail with overflow indication and packets being dropped.
> 
> This patch updates replay_esn->oseq_hi in the right place.
> 
> Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_replay_overflow functions for offloading")
> Signed-off-by: Yossef Efraim <yossefe@xxxxxxxxxxxx>

Applied to ipsec-next, thanks!