Re: [PATCH 2.6]: keep fragment queues private to each user

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

Patrick McHardy <kaber@xxxxxxxxx> wrote:
> 
> This patch keeps fragment queues private to each ip_defrag user to avoid
> skbs jumping between different callers. It shouldn't change any wanted
> behaviour, the only questionable one was ip_call_ra_chain, but the RA
> option is included in each fragment. If you're fine with the patch I'm going
> to send a 2.4 version later.

Patch looks good.

However, I think this is still not enough.  What about fragments
that come from different interfaces? Fragments with different
security paths?

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt