tipc: discard MSG_CRYPTO msgs when key_exchange_enabled is not set

When key_exchange is disabled, there is no reason to accept MSG_CRYPTO
msgs if it doesn't send MSG_CRYPTO msgs.

Signed-off-by: Xin Long <lucien.xin@gmail.com>
Acked-by: Jon Maloy <jmaloy@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/net/tipc/link.c b/net/tipc/link.c
index 09ae8448f394f738f434cf521503a43450615c95..8d9e09f48f4ca14696157cc0de918d0e40051204 100644 (file)
--- a/net/tipc/link.c
+++ b/net/tipc/link.c
@@ -1298,7 +1298,8 @@ static bool tipc_data_input(struct tipc_link *l, struct sk_buff *skb,
                return false;
 #ifdef CONFIG_TIPC_CRYPTO
        case MSG_CRYPTO:
-               if (TIPC_SKB_CB(skb)->decrypted) {
+               if (sysctl_tipc_key_exchange_enabled &&
+                   TIPC_SKB_CB(skb)->decrypted) {
                        tipc_crypto_msg_rcv(l->net, skb);
                        return true;
                }