Re: [PATCH net-next] bonding: deal with xfrm state in all modes and add more error-checking

2020-07-08 Thread David Miller
From: Jarod Wilson Date: Wed, 8 Jul 2020 13:46:31 -0400 > It's possible that device removal happens when the bond is in non-AB mode, > and addition happens in AB mode, so bond_ipsec_del_sa() never gets called, > which leaves security associations in an odd state if bond_ipsec_add_sa() > then get

[PATCH net-next] bonding: deal with xfrm state in all modes and add more error-checking

2020-07-08 Thread Jarod Wilson
It's possible that device removal happens when the bond is in non-AB mode, and addition happens in AB mode, so bond_ipsec_del_sa() never gets called, which leaves security associations in an odd state if bond_ipsec_add_sa() then gets called after switching the bond into AB. Just call add and delete