diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2024-10-23 12:53:43 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-02-08 09:58:00 +0100 |
| commit | aa48a18fdb0911572d133057cd579db704b87da4 (patch) | |
| tree | 37ea3988081c5b910f854f9e822b141cb4e2ee7d /net/xfrm/xfrm_input.c | |
| parent | 2a64cff2aabe8b3a1bff9374a3e953323d08ee0e (diff) | |
xfrm: Cache used outbound xfrm states at the policy.
[ Upstream commit 0045e3d80613cc7174dc15f189ee6fc4e73b9365 ]
Now that we can have percpu xfrm states, the number of active
states might increase. To get a better lookup performance,
we cache the used xfrm states at the policy for outbound
IPsec traffic.
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Tested-by: Antony Antony <antony.antony@secunet.com>
Tested-by: Tobias Brunner <tobias@strongswan.org>
Stable-dep-of: e952837f3ddb ("xfrm: state: fix out-of-bounds read during lookup")
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'net/xfrm/xfrm_input.c')
0 files changed, 0 insertions, 0 deletions