Subject: Re: [15/*] [INET] Fix IPsec calculation in ip_append_data/ip6_append_data

From: Mika Penttilä <[email-masked]>
Date: Mon, 21 Mar 2005 23:29:58 +0200

Herbert Xu wrote:

>On Mon, Mar 21, 2005 at 06:14:07PM +0200, Mika Penttil? wrote:
>  
>
>>Shouldn't ip_output also use the path variant, dst_mtu(skb->dst->path), 
>>it's surely after ipsec- processing?
>>    
>>
>
>That's the reason why it shouldn't use dst->path.  The only time you
>should use dst_mtu(dst->path) is when dst may contain IPsec AND you
>need the MTU outside IPsec.
>
>In this case dst cannot contain IPsec so dst_mtu(dst) is correct.
>
>Cheers,
>  
>
ok I see it now, but this is really easy to get wrong...

Thanks,
Mika