From: Herbert Xu Date: Tue, 20 May 2008 21:32:14 +0000 (-0700) Subject: ipsec: Use the correct ip_local_out function X-Git-Tag: v2.6.26-rc4~91^2~6 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1ac06e0306d0192a7a4d9ea1c9e06d355ce7e7d3;p=pandora-kernel.git ipsec: Use the correct ip_local_out function Because the IPsec output function xfrm_output_resume does its own dst_output call it should always call __ip_local_output instead of ip_local_output as the latter may invoke dst_output directly. Otherwise the return values from nf_hook and dst_output may clash as they both use the value 1 but for different purposes. When that clash occurs this can cause a packet to be used after it has been freed which usually leads to a crash. Because the offending value is only returned from dst_output with qdiscs such as HTB, this bug is normally not visible. Thanks to Marco Berizzi for his perseverance in tracking this down. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller --- Reading git-diff-tree failed