Subject: Re: [RFC PATCH] xfrm: avoid to send/receive the exceeding hard lifetime data

From: Steffen Klassert <[email-masked]>
Date: Fri, 14 Dec 2012 12:39:45 +0100

On Fri, Dec 14, 2012 at 02:58:03PM +0800, RongQing Li wrote:
> 
> Yes, RFC does not say how to handle this packet.
> 
> But when I do a IPsec compliance test with IxANVL, the test case 5.3/5.11,
> which reports a error because it expects this packet should be dropped, but not.
> 
> 
> I do not know if it is bug, or if it is valuable to fix it?
> 

As long as the RFC does not state anything else, we ar ok in the
synchronous code path. But we need a fix for the asynchronous
code path.