Re: [PATCH ipsec v6] xfrm: replay: Fix ESN wrap around for GSO

From: Herbert Xu
Date: Thu Oct 13 2022 - 04:05:53 EST

On Thu, Oct 13, 2022 at 08:16:33AM +0200, Steffen Klassert wrote:
> That is because with this patch, the sequence number from the xfrm_state
> is assigned to the skb and advanced by the number of segments while
> holding the state lock, as it was before. The sequence numbers this
> patch operates on are exclusive and private to that skb (and its
> segments). The next skb will checkout the correct number from the
> xfrm_state regardless on which cpu it comes.

Thanks for the explanation Steffen.
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page:
PGP Key: