Re: [PATCH ipsec v2 4/7] xfrm: prevent AES-GCM nonce reuse after early GSO

[Usman Malik]

On Sun, 8 Nov 2026 14:26:49 +0000, Jeremy Jean wrote:
> With software ESP offload, xfrm_output() attaches a secpath before
> calling xfrm_output_gso() for an encapsulated GSO packet, but
> skb_gso_segment() leaves the splitted skbs sharing the same secpath,
> including xo->seq.

I tested v1 of this patch and posted the results in the v1 thread:
https://lore.kernel.org/netdev/20260930144523.435271-6-Jeremy.Jean@xxxxxxxxxxxxxxxxx/T/

In v2 only the commit message and the code comment changed, the code
is the same, so the results hold.

Tested-by: Usman Malik <usmanmalik@xxxxxxxxxxxx>