From 716ca530e1c4515d8683c9d5be3d56b301758b66 Mon Sep 17 00:00:00 2001
From: James <>
Date: Wed, 4 Nov 2015 11:49:21 +0000
Subject: trunk-47381

---
 .../generic/patches-4.3/616-net_optimize_xfrm_calls.patch    | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 target/linux/generic/patches-4.3/616-net_optimize_xfrm_calls.patch

(limited to 'target/linux/generic/patches-4.3/616-net_optimize_xfrm_calls.patch')

diff --git a/target/linux/generic/patches-4.3/616-net_optimize_xfrm_calls.patch b/target/linux/generic/patches-4.3/616-net_optimize_xfrm_calls.patch
new file mode 100644
index 0000000..2a64d54
--- /dev/null
+++ b/target/linux/generic/patches-4.3/616-net_optimize_xfrm_calls.patch
@@ -0,0 +1,12 @@
+--- a/net/netfilter/nf_nat_core.c
++++ b/net/netfilter/nf_nat_core.c
+@@ -90,6 +90,9 @@ int nf_xfrm_me_harder(struct sk_buff *sk
+ 	struct dst_entry *dst;
+ 	int err;
+ 
++	if (skb->dev && !dev_net(skb->dev)->xfrm.policy_count[XFRM_POLICY_OUT])
++		return 0;
++
+ 	err = xfrm_decode_session(skb, &fl, family);
+ 	if (err < 0)
+ 		return err;
-- 
cgit v1.2.3