Introduces validation for the x->dir attribute within the XFRM output data lookup path. If the configured direction does not match the expected direction, output, increment the XfrmOutStateDirError counter and drop the packet to ensure data integrity and correct flow handling. grep -vw 0 /proc/net/xfrm_stat XfrmOutPolError 1 XfrmOutStateDirError 1
Showing the changes to include/uapi (1 of 4 files). Show all
Unified · Split
| @@ -337,6 +337,7 @@ enum · 336 unmodified lines | ||
| 337 | 337 | LINUX_MIB_XFRMFWDHDRERROR, /* XfrmFwdHdrError*/ |
| 338 | 338 | LINUX_MIB_XFRMOUTSTATEINVALID, /* XfrmOutStateInvalid */ |
| 339 | 339 | LINUX_MIB_XFRMACQUIREERROR, /* XfrmAcquireError */ |
| 340 | + LINUX_MIB_XFRMOUTSTATEDIRERROR, /* XfrmOutStateDirError */ | |
| 340 | 341 | __LINUX_MIB_XFRMMAX |
| 341 | 342 | }; |
| 342 | 343 | |