linux.git/net/ipv4/esp4.c, branch v2.6.36

xfrm: SA lookups signature with mark

2010-02-23T00:20:22+00:00

pass mark to all SA lookups to prepare them for when we add code
to have them search.

Signed-off-by: Jamal Hadi Salim 
Signed-off-by: David S. Miller

xfrm: Use the user specified truncation length in ESP and AH

2009-11-25T23:48:41+00:00

Instead of using the hardcoded truncation for authentication
algorithms, use the truncation length specified on xfrm_state.

Signed-off-by: Martin Willi 
Signed-off-by: David S. Miller

net: constify struct net_protocol

2009-09-15T00:03:01+00:00

Remove long removed "inet_protocol_base" declaration.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

netns xfrm: AH/ESP in netns!

2008-11-26T01:59:27+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

netns xfrm: state lookup in netns

2008-11-26T01:30:50+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

net: clean up net/ipv4/ah4.c esp4.c fib_semantics.c inet_connection_sock.c inetpeer.c ip_output.c

2008-11-03T08:23:42+00:00

Signed-off-by: Jianjun Kong 
Signed-off-by: David S. Miller

ipsec: Interfamily IPSec BEET

2008-08-06T09:39:30+00:00

Here's a revised version, based on Herbert's comments, of a fix for
the ipv6-inner, ipv4-outer interfamily ipsec beet mode. It fixes the
network header adjustment in interfamily, and doesn't reserve space
for the pseudo header anymore when we have ipv6 as the inner family.

Signed-off-by: Joakim Koskela 
Acked-by: Herbert Xu 
Signed-off-by: David S. Miller

[ESP]: Ensure IV is in linear part of the skb to avoid BUG() due to OOB access

2008-03-27T23:08:03+00:00

ESP does not account for the IV size when calling pskb_may_pull() to
ensure everything it accesses directly is within the linear part of a
potential fragment. This results in a BUG() being triggered when the
both the IPv4 and IPv6 ESP stack is fed with an skb where the first
fragment ends between the end of the esp header and the end of the IV.

This bug was found by Dirk Nehring  .

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[IPV4]: esp_output() misannotations

2008-03-18T05:50:23+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[IPSEC]: Fix bogus usage of u64 on input sequence number

2008-02-13T06:50:35+00:00

Al Viro spotted a bogus use of u64 on the input sequence number which
is big-endian.  This patch fixes it by giving the input sequence number
its own member in the xfrm_skb_cb structure.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller