tree a2c76876b9f9d77f84adbdcb9bd167a534b6ce0a
parent 3d5221af9c7711b7aec8da1298c8fc393ef6183d
author Antony Antony <antony.antony@secunet.com> 1765449027 +0100
committer Steffen Klassert <steffen.klassert@secunet.com> 1765793185 +0100

xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set

The XFRM_STATE_NOPMTUDISC flag is only meaningful for output SAs, but
it was being applied regardless of the SA direction when the sysctl
ip_no_pmtu_disc is enabled. This can unintentionally affect input SAs.

Limit setting XFRM_STATE_NOPMTUDISC to output SAs when the SA direction
is configured.

Closes: https://github.com/strongswan/strongswan/issues/2946
Fixes: a4a87fa4e96c ("xfrm: Add Direction to the SA in or out")
Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>