diff options
| author | Horia Geanta | 2014-02-12 15:20:06 +0100 |
|---|---|---|
| committer | Steffen Klassert | 2014-02-13 07:40:30 +0100 |
| commit | 0f24558e91563888d51e9be5b70981da920c37ac (patch) | |
| tree | 31aba2926b9f641fe30e235acc5a87b1b4dab73b /include | |
| parent | flowcache: Bring net/core/flow.c under IPsec maintain scope (diff) | |
| download | kernel-qcow2-linux-0f24558e91563888d51e9be5b70981da920c37ac.tar.gz kernel-qcow2-linux-0f24558e91563888d51e9be5b70981da920c37ac.tar.xz kernel-qcow2-linux-0f24558e91563888d51e9be5b70981da920c37ac.zip | |
xfrm: avoid creating temporary SA when there are no listeners
In the case when KMs have no listeners, km_query() will fail and
temporary SAs are garbage collected immediately after their allocation.
This causes strain on memory allocation, leading even to OOM since
temporary SA alloc/free cycle is performed for every packet
and garbage collection does not keep up the pace.
The sane thing to do is to make sure we have audience before
temporary SA allocation.
Signed-off-by: Horia Geanta <horia.geanta@freescale.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'include')
| -rw-r--r-- | include/net/xfrm.h | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/include/net/xfrm.h b/include/net/xfrm.h index afa5730fb3bd..5313ccfdeedf 100644 --- a/include/net/xfrm.h +++ b/include/net/xfrm.h @@ -594,6 +594,7 @@ struct xfrm_mgr { const struct xfrm_migrate *m, int num_bundles, const struct xfrm_kmaddress *k); + bool (*is_alive)(const struct km_event *c); }; int xfrm_register_km(struct xfrm_mgr *km); @@ -1646,6 +1647,20 @@ static inline int xfrm_aevent_is_on(struct net *net) rcu_read_unlock(); return ret; } + +static inline int xfrm_acquire_is_on(struct net *net) +{ + struct sock *nlsk; + int ret = 0; + + rcu_read_lock(); + nlsk = rcu_dereference(net->xfrm.nlsk); + if (nlsk) + ret = netlink_has_listeners(nlsk, XFRMNLGRP_ACQUIRE); + rcu_read_unlock(); + + return ret; +} #endif static inline int xfrm_alg_len(const struct xfrm_algo *alg) |