Steffen Klassert c5d4d7d831 xfrm: Fix deletion of offloaded SAs on failure. ...

When we off load a SA, it gets pushed to the NIC before we can
add it. In case of a failure, we don't delete this SA from the
NIC. Fix this by calling xfrm_dev_state_delete on failure.

Fixes: d77e38e612 ("xfrm: Add an IPsec hardware offloading API")
Reported-by: Shannon Nelson <shannon.nelson@oracle.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

2017-09-11 10:36:41 +02:00

75 KiB

Raw Blame History

View Raw