Re: [PATCH net] xfrm: Verify MAC header exists before overwriting eth_hdr(skb)->h_proto

From: Steffen Klassert
Date: Wed Mar 07 2018 - 07:57:21 EST


On Sun, Mar 04, 2018 at 09:03:52PM +0200, yossiku@xxxxxxxxxxxx wrote:
> From: Yossi Kuperman <yossiku@xxxxxxxxxxxx>
>
> Artem Savkov reported that commit 5efec5c655dd leads to a packet loss under
> IPSec configuration. It appears that his setup consists of a TUN device,
> which does not have a MAC header.
>
> Make sure MAC header exists.
>
> Note: TUN device sets a MAC header pointer, although it does not have one.
>
> Fixes: 5efec5c655dd ("xfrm: Fix eth_hdr(skb)->h_proto to reflect inner IP version")
> Reported-by: Artem Savkov <artem.savkov@xxxxxxxxx>
> Tested-by: Artem Savkov <artem.savkov@xxxxxxxxx>
> Signed-off-by: Yossi Kuperman <yossiku@xxxxxxxxxxxx>

Applied, thanks Yossi!