[PATCH net 0/2] psp: drop packets with extension headers in transport mode

[Todd Freed <toddfreed@meta.com>]

While working on adding support for socket-less psp associations, I
noticed that this case was not being handled correctly. It will be more
relevant with that series, because it adds udp support, for which the
psp nexthdr will be taken from the inner packet.

Since the tx association encodes intent to send encrypted packets, but
because of other configuration (socket options, routes) the packets are
sent unencrypted, sending this change as a fix.

The first patch drops the packets, the second patch adds selftests for
that case.

Todd Freed (2):
  psp: drop transport mode packets with extension headers
  selftests: drv-net: psp: test ipv6 tcp socket with extension headers

 net/psp/psp_main.c                         |   7 +-
 tools/testing/selftests/drivers/net/config |   1 +
 tools/testing/selftests/drivers/net/psp.py | 120 ++++++++++++++++++++-
 3 files changed, 125 insertions(+), 3 deletions(-)

-- 
2.53.0-Meta