kernel.git/net/ipv4/esp4.c, branch linux-2.6.33.yHosts the 0x221E linux distro kernel.
https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-2.6.33.y2009-11-25T23:48:41Zxfrm: Use the user specified truncation length in ESP and AH2009-11-25T23:48:41ZMartin Willi2009-11-25T00:29:53Zurn:sha1:8f8a088c2127c729638da8f2d33860e346c01eda
Instead of using the hardcoded truncation for authentication
algorithms, use the truncation length specified on xfrm_state.
Signed-off-by: Martin Willi <martin@strongswan.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net: constify struct net_protocol2009-09-15T00:03:01ZAlexey Dobriyan2009-09-14T12:21:47Zurn:sha1:32613090a96dba2ca2cc524c8d4749d3126fdde5
Remove long removed "inet_protocol_base" declaration.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netns xfrm: AH/ESP in netns!2008-11-26T01:59:27ZAlexey Dobriyan2008-11-26T01:59:27Zurn:sha1:4fb236bac9fc7d51e2267866de6d4c30e549d2f8
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
netns xfrm: state lookup in netns2008-11-26T01:30:50ZAlexey Dobriyan2008-11-26T01:30:50Zurn:sha1:221df1ed33c9284fc7a6f6e47ca7f8d5f3665d43
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net: clean up net/ipv4/ah4.c esp4.c fib_semantics.c inet_connection_sock.c inetpeer.c ip_output.c2008-11-03T08:23:42ZJianjun Kong2008-11-03T08:23:42Zurn:sha1:d9319100c1ad7d0ed4045ded767684ad25670436
Signed-off-by: Jianjun Kong <jianjun@zeuux.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
ipsec: Interfamily IPSec BEET2008-08-06T09:39:30ZJoakim Koskela2008-08-06T09:39:30Zurn:sha1:eb49e63093498cd17382018495b8cfb5b4a679bd
Here's a revised version, based on Herbert's comments, of a fix for
the ipv6-inner, ipv4-outer interfamily ipsec beet mode. It fixes the
network header adjustment in interfamily, and doesn't reserve space
for the pseudo header anymore when we have ipv6 as the inner family.
Signed-off-by: Joakim Koskela <jookos@gmail.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
[ESP]: Ensure IV is in linear part of the skb to avoid BUG() due to OOB access2008-03-27T23:08:03ZThomas Graf2008-03-27T23:08:03Zurn:sha1:920fc941a9617f95ccb283037fe6f8a38d95bb69
ESP does not account for the IV size when calling pskb_may_pull() to
ensure everything it accesses directly is within the linear part of a
potential fragment. This results in a BUG() being triggered when the
both the IPv4 and IPv6 ESP stack is fed with an skb where the first
fragment ends between the end of the esp header and the end of the IV.
This bug was found by Dirk Nehring <dnehring@gmx.net> .
Signed-off-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPV4]: esp_output() misannotations2008-03-18T05:50:23ZAl Viro2008-03-18T05:50:23Zurn:sha1:5e226e4d9016daee170699f8a4188a5505021756
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: David S. Miller <davem@davemloft.net>
[IPSEC]: Fix bogus usage of u64 on input sequence number2008-02-13T06:50:35ZHerbert Xu2008-02-13T06:50:35Zurn:sha1:b318e0e4ef4e85812c25afa19f75addccc834cd4
Al Viro spotted a bogus use of u64 on the input sequence number which
is big-endian. This patch fixes it by giving the input sequence number
its own member in the xfrm_skb_cb structure.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
[XFRM]: constify 'struct xfrm_type'2008-02-01T03:27:20ZEric Dumazet2008-01-31T03:11:50Zurn:sha1:533cb5b0a63f28ecab5503cfceb77e641fa7f7c4
Signed-off-by: Eric Dumazet <dada1@cosmosbay.com>
Signed-off-by: David S. Miller <davem@davemloft.net>