Otherwise 64bits kernel has sizeof(struct xfrm_usersa_info) 224 bytes, while 32bits compiled iproute2 see the same structure as 220 bytes, which leading deficit xfrm sa, in turn broken IPsec connectivity.
Fix this by packing the structure. Signed-off-by: Fan Du <[email protected]> --- include/uapi/linux/xfrm.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/uapi/linux/xfrm.h b/include/uapi/linux/xfrm.h index 470bfae..61460c4 100644 --- a/include/uapi/linux/xfrm.h +++ b/include/uapi/linux/xfrm.h @@ -366,7 +366,7 @@ struct xfrm_usersa_info { #define XFRM_STATE_AF_UNSPEC 32 #define XFRM_STATE_ALIGN4 64 #define XFRM_STATE_ESN 128 -}; +} __attribute__((packed)); #define XFRM_SA_XFLAG_DONT_ENCAP_DSCP 1 -- 1.7.9.5 _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
