From: Eric Dumazet <eric.duma...@gmail.com> Date: Mon, 28 Nov 2016 10:17:23 -0800
> It appears that Eli changelog was not very precise, because his bug was > because of XFRM being involved. > > xfrm_output() -> xfrm_output_gso() -> skb_gso_segment() > > So XFRM calls skb_gso_segment() before ip_output() or > ip6_finish_output2() had a chance to change skb->protocol I think if we do it in ip6_local_out and ip_local_out, then none of these hacks will be necessary at all.