linux.git/net/ipv4/esp4.c, branch v2.6.16

[IPSEC]: Kill post_input hook and do NAT-T in esp_input directly

2006-02-27T21:00:40+00:00

The only reason post_input exists at all is that it gives us the
potential to adjust the checksums incrementally in future which
we ought to do.

However, after thinking about it for a bit we can adjust the
checksums without using this post_input stuff at all.  The crucial
point is that only the inner-most NAT-T SA needs to be considered
when adjusting checksums.  What's more, the checksum adjustment
comes down to a single u32 due to the linearity of IP checksums.

We just happen to have a spare u32 lying around in our skb structure :)
When ip_summed is set to CHECKSUM_NONE on input, the value of skb->csum
is currently unused.  All we have to do is to make that the checksum
adjustment and voila, there goes all the post_input and decap structures!

I've left in the decap data structures for now since it's intricately
woven into the sec_path stuff.  We can kill them later too.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC] esp: Kill unnecessary block and indentation

2006-02-27T21:00:01+00:00

We used to keep sg on the stack which is why the extra block was useful.
We've long since stopped doing that so let's kill the block and save
some indentation.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h

2006-01-03T21:11:21+00:00

To help in reducing the number of include dependencies, several files were
touched as they were getting needed headers indirectly for stuff they use.

Thanks also to Alan Menegotto for pointing out that net/dccp/proto.c had
linux/dccp.h include twice.

Signed-off-by: Arnaldo Carvalho de Melo 
Signed-off-by: David S. Miller

[IPSEC] Fix block size/MTU bugs in ESP

2005-10-11T04:11:34+00:00

This patch fixes the following bugs in ESP:

* Fix transport mode MTU overestimate.  This means that the inner MTU
  is smaller than it needs be.  Worse yet, given an input MTU which
  is a multiple of 4 it will always produce an estimate which is not
  a multiple of 4.

  For example, given a standard ESP/3DES/MD5 transform and an MTU of
  1500, the resulting MTU for transport mode is 1462 when it should
  be 1464.

  The reason for this is because IP header lengths are always a multiple
  of 4 for IPv4 and 8 for IPv6.

* Ensure that the block size is at least 4.  This is required by RFC2406
  and corresponds to what the esp_output function does.  At the moment
  this only affects crypto_null as its block size is 1.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[IPSEC]: Use ALIGN macro in ESP

2005-10-11T04:11:08+00:00

This patch uses the macro ALIGN in all the applicable spots for ESP.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-02T00:44:29+00:00

Since the patch to add a NULL short-circuit to crypto_free_tfm() went in,
there's no longer any need for callers of that function to check for NULL.
This patch removes the redundant NULL checks and also a few similar checks
for NULL before calls to kfree() that I ran into while doing the
crypto_free_tfm bits.

I've succesfuly compile tested this patch, and a kernel with the patch 
applied boots and runs just fine.

When I posted the patch to LKML (and other lists/people on Cc) it drew the
following comments :

 J. Bruce Fields commented
  "I've no problem with the auth_gss or nfsv4 bits.--b."

 Sridhar Samudrala said
  "sctp change looks fine."

 Herbert Xu signed off on the patch.

So, I guess this is ready to be dropped into -mm and eventually mainline.

Signed-off-by: Jesper Juhl 
Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

[NET]: Make NETDEBUG pure printk wrappers

2005-08-29T22:56:08+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[IPSEC]: Add xfrm_init_state

2005-06-20T20:18:08+00:00

This patch adds xfrm_init_state which is simply a wrapper that calls
xfrm_get_type and subsequently x->type->init_state.  It also gets rid
of the unused args argument.

Abstracting it out allows us to add common initialisation code, e.g.,
to set family-specific flags.

The add_time setting in xfrm_user.c was deleted because it's already
set by xfrm_state_alloc.

Signed-off-by: Herbert Xu 
Acked-by: James Morris 
Signed-off-by: David S. Miller

[IPSEC]: Fix esp_decap_data size verification in esp4.

2005-06-01T00:08:05+00:00

Signed-off-by: Edgar E Iglesias 
Signed-off-by: David S. Miller

Linux-2.6.12-rc2

2005-04-16T22:20:36+00:00

Initial git repository build. I'm not bothering with the full history,
even though we have it. We can create a separate "historical" git
archive of that later if we want to, and in the meantime it's about
3.2GB when imported into git - space that would just make the early
git days unnecessarily complicated, when we don't have a lot of good
infrastructure for it.

Let it rip!