Diffusion FreeBSD src repository b0e020764aae

ipsec + ktls: cannot coexists
b0e020764aae
Actions

Description

ipsec + ktls: cannot coexists

but instead of tripping the assert in debug kernel, and silently falling
into UB for prod, skip IPSEC processing for KTLS framed packets when
mb_unmapped_to_ext() failed.

Reviewed by: markj
Sponsored by: NVidia networking
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D48265

Details

Provenance

kib	Authored on Sat, Dec 28, 8:30 AM

Reviewer

markj

Differential Revision

D48265: ipsec: improve integration with unmapped mbufs (on Tx)

Parents

rGcf322978d73a: mb_unmapped_to_ext(): return error code on error

Branches

Unknown

Tags

Unknown

Event Timeline

kib committed rGb0e020764aae: ipsec + ktls: cannot coexists (authored by kib).Mon, Jan 13, 7:29 PM

kib added an edge: D48265: ipsec: improve integration with unmapped mbufs (on Tx).

kib mentioned this in rGc968d55123fa: ipsec + ktls: cannot coexists.Mon, Jan 20, 2:40 AM

Changes (2)

Path

Size

sys/

netinet/

ip_output.c

netinet6/

ip6_output.c

rGb0e020764aae

View Options

sys/netinet/ip_output.c