From dbb1db8b59fb84d620ab5266366b52c8052ee75c Mon Sep 17 00:00:00 2001 From: Herbert Xu Date: Tue, 1 Jan 2008 23:52:59 -0800 Subject: [IPSEC]: Return EOVERFLOW when output sequence number overflows Previously we made it an error on the output path if the sequence number overflowed. However we did not set the err variable accordingly. This patch sets err to -EOVERFLOW in that case. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller --- net/xfrm/xfrm_output.c | 1 + 1 file changed, 1 insertion(+) (limited to 'net/xfrm/xfrm_output.c') diff --git a/net/xfrm/xfrm_output.c b/net/xfrm/xfrm_output.c index 81ad8eb2b28..f4a1047a557 100644 --- a/net/xfrm/xfrm_output.c +++ b/net/xfrm/xfrm_output.c @@ -66,6 +66,7 @@ static int xfrm_output_one(struct sk_buff *skb, int err) if (unlikely(x->replay.oseq == 0)) { x->replay.oseq--; xfrm_audit_state_replay_overflow(x, skb); + err = -EOVERFLOW; goto error; } if (xfrm_aevent_is_on()) -- cgit v1.2.3