xfrm: Restrict extended sequence numbers to esp

The IPsec extended sequence numbers are fully implemented just for
esp. So restrict the usage to esp until other protocols have
support too.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by Steffen Klassert and committed by David S. Miller 02aadf72 e2b19125

+3
+3
net/xfrm/xfrm_user.c
··· 127 127 if (!rt) 128 128 return 0; 129 129 130 + if (p->id.proto != IPPROTO_ESP) 131 + return -EINVAL; 132 + 130 133 if (p->replay_window != 0) 131 134 return -EINVAL; 132 135