tag fc9e3f755589d2db4f01e213e262a21c305022d5
tagger Steffen Klassert <steffen.klassert@secunet.com> Wed Mar 15 11:45:25 2023 +0100
object c276a706ea1f51cf9723ed8484feceaf961b8f89

ipsec-2023-03-15

commit c276a706ea1f51cf9723ed8484feceaf961b8f89
author Herbert Xu <herbert@gondor.apana.org.au> Tue Feb 21 13:54:00 2023 +0800
committer Steffen Klassert <steffen.klassert@secunet.com> Fri Feb 24 10:07:24 2023 +0100
tree f4a884a9334bf740905f9a7bef2e8c65dcf14569
parent 8222d5910dae08213b6d9d4bc9a7f8502855e624

xfrm: Allow transport-mode states with AF_UNSPEC selector

xfrm state selectors are matched against the inner-most flow
which can be of any address family.  Therefore middle states
in nested configurations need to carry a wildcard selector in
order to work at all.

However, this is currently forbidden for transport-mode states.

Fix this by removing the unnecessary check.

Fixes: 13996378e658 ("[IPSEC]: Rename mode to outer_mode and add inner_mode")
Reported-by: David George <David.George@sophos.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>