Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:
> - if (unlikely(dst_xfrm(&rt->dst))) {
> + rt = (struct rtable *)tuplehash->tuple.dst_cache;
> +
> + if (unlikely(tuplehash->tuple.xmit_type == FLOW_OFFLOAD_XMIT_XFRM)) {
> memset(skb->cb, 0, sizeof(struct inet_skb_parm));
> IPCB(skb)->iif = skb->dev->ifindex;
> IPCB(skb)->flags = IPSKB_FORWARDED;
> return nf_flow_xmit_xfrm(skb, state, &rt->dst);
> }
[..]
> +
> + if (unlikely(tuplehash->tuple.xmit_type == FLOW_OFFLOAD_XMIT_NEIGH))
This needs to be XMIT_XFRM too.
