kernel.git/net/ipv4/esp4.c, branch linux-2.6.32.y

net: constify struct net_protocol

2009-09-15T00:03:01Z

Remove long removed "inet_protocol_base" declaration. Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns xfrm: AH/ESP in netns!

2008-11-26T01:59:27Z

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns xfrm: state lookup in netns

2008-11-26T01:30:50Z

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

net: clean up net/ipv4/ah4.c esp4.c fib_semantics.c inet_connection_sock.c inetpeer.c ip_output.c

2008-11-03T08:23:42Z

Signed-off-by: Jianjun Kong Signed-off-by: David S. Miller

ipsec: Interfamily IPSec BEET

2008-08-06T09:39:30Z

Here's a revised version, based on Herbert's comments, of a fix for the ipv6-inner, ipv4-outer interfamily ipsec beet mode. It fixes the network header adjustment in interfamily, and doesn't reserve space for the pseudo header anymore when we have ipv6 as the inner family. Signed-off-by: Joakim Koskela Acked-by: Herbert Xu Signed-off-by: David S. Miller

[ESP]: Ensure IV is in linear part of the skb to avoid BUG() due to OOB access

2008-03-27T23:08:03Z

ESP does not account for the IV size when calling pskb_may_pull() to ensure everything it accesses directly is within the linear part of a potential fragment. This results in a BUG() being triggered when the both the IPv4 and IPv6 ESP stack is fed with an skb where the first fragment ends between the end of the esp header and the end of the IV. This bug was found by Dirk Nehring . Signed-off-by: Thomas Graf Signed-off-by: David S. Miller

[IPV4]: esp_output() misannotations

2008-03-18T05:50:23Z

Signed-off-by: Al Viro Signed-off-by: David S. Miller

[IPSEC]: Fix bogus usage of u64 on input sequence number

2008-02-13T06:50:35Z

Al Viro spotted a bogus use of u64 on the input sequence number which is big-endian. This patch fixes it by giving the input sequence number its own member in the xfrm_skb_cb structure. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller

[XFRM]: constify 'struct xfrm_type'

2008-02-01T03:27:20Z

Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller

[IPSEC]: Add support for combined mode algorithms

2008-02-01T03:27:03Z

This patch adds support for combined mode algorithms with GCM being the first algorithm supported. Combined mode algorithms can be added through the xfrm_user interface using the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms is identified by its name and the ICV length. For the purposes of matching algorithms in xfrm_tmpl structures, combined mode algorithms occupy the same name space as encryption algorithms. This is in line with how they are negotiated using IKE. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller