tree c5acf45f7b62b6504b87f2332e2639f7fb678b49
parent 013cb81e89f8a70deef086ca29a923faf5585ab0
author Steffen Klassert <steffen.klassert@secunet.com> 1519806199 +0100
committer Steffen Klassert <steffen.klassert@secunet.com> 1519888490 +0100

xfrm: Fix ESN sequence number handling for IPsec GSO packets.

When IPsec offloading was introduced, we accidentally incremented
the sequence number counter on the xfrm_state by one packet
too much in the ESN case. This leads to a sequence number gap of
one packet after each GSO packet. Fix this by setting the sequence
number to the correct value.

Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_replay_overflow functions for offloading")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>