linux.git/net/xfrm, branch v2.6.32

net: file_operations should be const

2009-09-02T08:03:53+00:00

All instances of file_operations should be const.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

Fix xfrm hash collisions by changing __xfrm4_daddr_saddr_hash to hash addresses with addition

2009-08-10T04:45:31+00:00

This patch fixes hash collisions in cases where number
of entries have incrementing IP source and destination addresses
from single respective subnets (i.e. 192.168.0.1-172.16.0.1,
192.168.0.2-172.16.0.2, and so on.).

Signed-off-by: Jussi Maki 
Signed-off-by: David S. Miller

xfrm: use xfrm_addr_cmp() instead of compare addresses directly

2009-06-30T02:41:46+00:00

Clean up to use xfrm_addr_cmp() instead of compare addresses directly.

Signed-off-by: Wei Yongjun 
Acked-by: Herbert Xu 
Signed-off-by: David S. Miller

ipsec: Fix name of CAST algorithm

2009-06-25T01:03:10+00:00

Our CAST algorithm is called cast5, not cast128.  Clearly nobody
has ever used it :)

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller

xfrm: Use frag list abstraction interfaces.

2009-06-09T07:24:07+00:00

Signed-off-by: David S. Miller

net: skb->dst accessors

2009-06-03T09:51:04+00:00

Define three accessors to get/set dst attached to a skb

struct dst_entry *skb_dst(const struct sk_buff *skb)

void skb_dst_set(struct sk_buff *skb, struct dst_entry *dst)

void skb_dst_drop(struct sk_buff *skb)
This one should replace occurrences of :
dst_release(skb->dst)
skb->dst = NULL;

Delete skb->dst field

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

xfrm: wrong hash value for temporary SA

2009-04-27T09:58:59+00:00

When kernel inserts a temporary SA for IKE, it uses the wrong hash
value for dst list. Two hash values were calcultated before: one with
source address and one with a wildcard source address.

Bug hinted by Junwei Zhang 
Signed-off-by: Nicolas Dichtel 
Signed-off-by: David S. Miller

xfrm: spin_lock() should be spin_unlock() in xfrm_state.c

2009-03-27T07:23:04+00:00

spin_lock() should be spin_unlock() in xfrm_state_walk_done().

caused by:
commit 12a169e7d8f4b1c95252d8b04ed0f1033ed7cfe2
"ipsec: Put dumpers on the dump list"

Reported-by: Marc Milgram 
Signed-off-by: Chuck Ebbert 
Signed-off-by: David S. Miller

xfrm: Fix xfrm_state_find() wrt. wildcard source address.

2009-03-13T21:22:40+00:00

The change to make xfrm_state objects hash on source address
broke the case where such source addresses are wildcarded.

Fix this by doing a two phase lookup, first with fully specified
source address, next using saddr wildcarded.

Reported-by: Nicolas Dichtel 
Signed-off-by: David S. Miller

Revert "xfrm: For 32/64 compatability wrt. xfrm_usersa_info"

2009-01-20T17:49:51+00:00

This reverts commit fc8c7dc1b29560c016a67a34ccff32a712b5aa86.

As indicated by Jiri Klimes, this won't work.  These numbers are
not only used the size validation, they are also used to locate
attributes sitting after the message.

Signed-off-by: David S. Miller