xfrm_policy.c (1bfcb10f670f5ff5e1d9f53e59680573524cb142) xfrm_policy.c (13996378e6585fb25e582afe7489bf52dde78deb)
1/*
2 * xfrm_policy.c
3 *
4 * Changes:
5 * Mitsuru KANDA @USAGI
6 * Kazunori MIYAZAWA @USAGI
7 * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
8 * IPv6 support

--- 1927 unchanged lines hidden (view full) ---

1936 !security_xfrm_state_pol_flow_match(dst->xfrm, pol, fl))
1937 return 0;
1938 if (dst->xfrm->km.state != XFRM_STATE_VALID)
1939 return 0;
1940 if (xdst->genid != dst->xfrm->genid)
1941 return 0;
1942
1943 if (strict && fl &&
1/*
2 * xfrm_policy.c
3 *
4 * Changes:
5 * Mitsuru KANDA @USAGI
6 * Kazunori MIYAZAWA @USAGI
7 * Kunihiro Ishiguro <kunihiro@ipinfusion.com>
8 * IPv6 support

--- 1927 unchanged lines hidden (view full) ---

1936 !security_xfrm_state_pol_flow_match(dst->xfrm, pol, fl))
1937 return 0;
1938 if (dst->xfrm->km.state != XFRM_STATE_VALID)
1939 return 0;
1940 if (xdst->genid != dst->xfrm->genid)
1941 return 0;
1942
1943 if (strict && fl &&
1944 !(dst->xfrm->mode->flags & XFRM_MODE_FLAG_TUNNEL) &&
1944 !(dst->xfrm->outer_mode->flags & XFRM_MODE_FLAG_TUNNEL) &&
1945 !xfrm_state_addr_flow_check(dst->xfrm, fl, family))
1946 return 0;
1947
1948 mtu = dst_mtu(dst->child);
1949 if (xdst->child_mtu_cached != mtu) {
1950 last = xdst;
1951 xdst->child_mtu_cached = mtu;
1952 }

--- 466 unchanged lines hidden ---
1945 !xfrm_state_addr_flow_check(dst->xfrm, fl, family))
1946 return 0;
1947
1948 mtu = dst_mtu(dst->child);
1949 if (xdst->child_mtu_cached != mtu) {
1950 last = xdst;
1951 xdst->child_mtu_cached = mtu;
1952 }

--- 466 unchanged lines hidden ---