From 11ea043455b7e9b07c5c4a3cfd754e9f4e7ab69a Mon Sep 17 00:00:00 2001
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: Mon, 28 Mar 2011 19:48:09 +0000
Subject: [PATCH] --- yaml --- r: 243260 b: refs/heads/master c:
 02aadf72fe2c83f145e3437734e66be53abae481 h: refs/heads/master v: v3

---
 [refs]                     | 2 +-
 trunk/net/xfrm/xfrm_user.c | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index 1fab1b483799..a1f0ae198fff 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: e2b19125e94124daaeda1ddcf9b85b04575ad86f
+refs/heads/master: 02aadf72fe2c83f145e3437734e66be53abae481
diff --git a/trunk/net/xfrm/xfrm_user.c b/trunk/net/xfrm/xfrm_user.c
index ccc4c0c8ef00..3d15d3e1b2c4 100644
--- a/trunk/net/xfrm/xfrm_user.c
+++ b/trunk/net/xfrm/xfrm_user.c
@@ -127,6 +127,9 @@ static inline int verify_replay(struct xfrm_usersa_info *p,
 	if (!rt)
 		return 0;
 
+	if (p->id.proto != IPPROTO_ESP)
+		return -EINVAL;
+
 	if (p->replay_window != 0)
 		return -EINVAL;