aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm
AgeCommit message (Expand)AuthorFilesLines
2013-03-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+65
2013-03-25xfrm: Fix esn sequence number diff calculation in xfrm_replay_notify_esn()Mathias Krause1-4/+2
2013-03-20xfrm: Fix replay notification for esn.Steffen Klassert1-1/+67
2013-02-27hlist: drop the node parameter from iteratorsSasha Levin2-53/+36
2013-02-21Merge tag 'driver-core-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-8/+8
2013-02-18net: proc: change proc_net_remove to remove_proc_entryGao feng1-1/+1
2013-02-18net: proc: change proc_net_fops_create to proc_createGao feng1-2/+2
2013-02-14Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller3-13/+301
2013-02-11xfrm: Allow inserting policies with matching mark and different prioritiesSteffen Klassert1-2/+16
2013-02-06xfrm: Add a state resolution packet queueSteffen Klassert1-4/+225
2013-02-01xfrm: fix a unbalanced lockLi RongQing1-1/+1
2013-02-01pf_key/xfrm_algo: prepare pf_key and xfrm_algo for new algorithms without pfk...Jussi Kivilinna1-6/+59
2013-01-29xfrm: Convert xfrm_addr_cmp() to boolean xfrm_addr_equal().YOSHIFUJI Hideaki / 吉藤英明3-30/+30
2013-01-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-2/+4
2013-01-21xfrm: fix freed block size calculation in xfrm_policy_fini()Michal Kubecek1-1/+1
2013-01-18net/xfrm/xfrm_replay: avoid division by zeroNickolai Zeldovich1-1/+3
2013-01-17xfrm: use separated locks to protect pointers of struct xfrm_state_afinfoCong Wang1-25/+18
2013-01-16xfrm: replace rwlock on xfrm_km_list with rcuCong Wang1-28/+30
2013-01-16xfrm: replace rwlock on xfrm_state_afinfo with rcuCong Wang1-17/+16
2013-01-11net/xfrm: remove depends on CONFIG_EXPERIMENTALKees Cook1-8/+8
2013-01-08xfrm_algo: probe asynchronous block ciphers instead of synchronousJussi Kivilinna1-2/+1
2013-01-07xfrm: removes a superfluous check and add a statisticLi RongQing3-3/+7
2012-11-22Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller2-12/+9
2012-11-18net: Allow userns root to control llc, netfilter, netlink, packet, and xfrmEric W. Biederman1-1/+1
2012-11-18net: Don't export sysctls to unprivileged usersEric W. Biederman1-0/+4
2012-11-13net: xfrm: use __this_cpu_read per-cpu helperShan Wei1-5/+3
2012-11-08xfrm: remove redundant replay_esn checkUlrich Weber1-7/+6
2012-10-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds3-84/+88
2012-10-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds3-13/+13
2012-09-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-16/+44
2012-09-20xfrm_user: don't copy esn replay window twice for new statesMathias Krause1-4/+5
2012-09-20xfrm_user: ensure user supplied esn replay window is validMathias Krause1-6/+25
2012-09-20xfrm_user: fix info leak in copy_to_user_tmpl()Mathias Krause1-0/+1
2012-09-20xfrm_user: fix info leak in copy_to_user_policy()Mathias Krause1-0/+1
2012-09-20xfrm_user: fix info leak in copy_to_user_state()Mathias Krause1-0/+1
2012-09-20xfrm_user: fix info leak in copy_to_user_auth()Mathias Krause1-1/+1
2012-09-18xfrm: fix a read lock imbalance in make_blackholeLi RongQing1-1/+1
2012-09-18xfrm_user: return error pointer instead of NULL #2Mathias Krause1-2/+4
2012-09-18xfrm_user: return error pointer instead of NULLMathias Krause1-2/+4
2012-09-18xfrm: invalidate dst on policy insertion/deletionNicolas Dichtel1-0/+1
2012-09-17userns: Convert the audit loginuid to be a kuidEric W. Biederman3-13/+13
2012-09-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-2/+19
2012-09-10xfrm: Report user triggered expirations against the users socketEric W. Biederman1-2/+2
2012-09-10netlink: Rename pid to portid to avoid confusionEric W. Biederman2-36/+36
2012-09-08netlink: hide struct module parameter in netlink_kernel_createPablo Neira Ayuso1-1/+1
2012-09-04xfrm: Workaround incompatibility of ESN and async cryptoSteffen Klassert2-1/+16
2012-08-31net/xfrm/xfrm_state.c: fix error return codeJulia Lawall1-1/+3
2012-08-22xfrm: fix RCU bugsEric Dumazet1-37/+39
2012-08-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+2
2012-08-20net: ipv6: fix oops in inet_putpeer()Patrick McHardy1-0/+2
2012-08-16xfrm: Use rcu_dereference_bh to deference pointer protected by rcu_read_lock_bhFan Du1-2/+2
2012-08-15xfrm: remove redundant parameter "int dir" in struct xfrm_mgr.acquireFan Du2-6/+5
2012-08-14Replace rwlock on xfrm_policy_afinfo with rcuPriyanka Jain1-18/+21
2012-08-02Fix unexpected SA hard expiration after changing dateFan Du1-4/+17
2012-07-20net: Document dst->obsolete better.David S. Miller1-11/+12
2012-07-14xfrm: Initialize the struct xfrm_dst behind the dst_enty fieldSteffen Klassert1-2/+3
2012-07-05xfrm: No need to copy generic neighbour pointer.David S. Miller1-3/+0
2012-07-05net: Add optional SKB arg to dst_ops->neigh_lookup().David S. Miller1-2/+4
2012-06-29netlink: add netlink_kernel_cfg parameter to netlink_kernel_createPablo Neira Ayuso1-2/+5
2012-06-27xfrm_user: Propagate netlink error codes properly.David S. Miller1-190/+204
2012-05-27ipv6: fix incorrect ipsec fragmentGao feng1-0/+3
2012-05-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-0/+1
2012-05-15xfrm: Convert several xfrm policy match functions to bool.David S. Miller1-13/+14
2012-05-15xfrm_algo: drop an unnecessary inclusionJan Beulich1-3/+0
2012-05-15xfrm: make xfrm_algo.c a moduleJan Beulich3-5/+13
2012-04-20net: Convert all sysctl registrations to register_net_sysctlEric W. Biederman1-1/+1
2012-04-15net: cleanup unsigned to unsigned intEric Dumazet1-4/+4
2012-04-09SELinux: include flow.h where used rather than get it indirectlyEric Paris1-0/+1
2012-04-01xfrm_user: Stop using NLA_PUT*().David S. Miller1-43/+62
2012-03-22xfrm: Access the replay notify functions via the registered callbacksSteffen Klassert1-3/+3
2012-03-22xfrm: Remove unused xfrm_state from xfrm_state_check_spaceSteffen Klassert1-2/+2
2012-02-26netlink: add netlink_dump_control structure for netlink_dump_start()Pablo Neira Ayuso1-2/+7
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-1/+1
2012-01-12net: reintroduce missing rcu_assign_pointer() callsEric Dumazet1-1/+1
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Eric Paris1-1/+1
2011-12-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+14
2011-12-21net: Add a flow_cache_flush_deferred functionSteffen Klassert1-4/+14
2011-12-11net: use IS_ENABLED(CONFIG_IPV6)Eric Dumazet2-9/+9
2011-12-05net: Rename dst_get_neighbour{, _raw} to dst_get_neighbour_noref{, _raw}.David Miller1-1/+1
2011-11-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+6
2011-11-26net: Move mtu handling down to the protocol depended handlersSteffen Klassert1-1/+3
2011-11-26net: Rename the dst_opt default_mtu method to mtuSteffen Klassert1-3/+3
2011-11-22net: remove ipv6_addr_copy()Alexey Dobriyan1-8/+4
2011-11-22xfrm: optimize ipv4 selector matchingAlexey Dobriyan1-2/+2
2011-10-31net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modulesPaul Gortmaker2-0/+2
2011-10-19net: add skb frag size accessorsEric Dumazet1-1/+1
2011-10-18xfrm: Simplify the replay check and advance functionsSteffen Klassert1-64/+34
2011-10-07Merge branch 'master' of github.com:davem330/netDavid S. Miller1-4/+6
2011-09-27net: check return value for dst_allocMadalin Bucur1-4/+6
2011-09-22Merge branch 'master' of github.com:davem330/netDavid S. Miller1-0/+5
2011-09-21xfrm: Perform a replay check after return from async codepathsSteffen Klassert1-0/+5
2011-08-24net: xfrm: convert to SKB frag APIsIan Campbell1-4/+7
2011-08-02rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTERStephen Hemminger1-2/+2
2011-07-28xfrm: Fix key lengths for rfc3686(ctr(aes))Tushar Gohad1-2/+2
2011-07-18net: Add ->neigh_lookup() operation to dst_opsDavid S. Miller1-0/+7
2011-07-17net: Abstract dst->neighbour accesses behind helpers.David S. Miller1-1/+1
2011-07-14Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-0/+2
2011-07-08XFRM: Fix memory leak in xfrm_state_updateTushar Gohad1-0/+2
2011-07-05Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-3/+3
2011-07-01xfrm: Remove family arg from xfrm_bundle_okSteffen Klassert1-3/+3
2011-06-20Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-2/+2
2011-06-09rtnetlink: Compute and store minimum ifinfo dump sizeGreg Rose1-1/+2
2011-06-07xfrm: Fix off by one in the replay advance functionsSteffen Klassert1-2/+2
2011-05-11Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller2-1/+16
2011-05-10xfrm: Don't allow esn with disabled anti replay detectionSteffen Klassert1-0/+3
2011-05-10xfrm: Assign the inner mode output function to the dst entrySteffen Klassert1-1/+13
2011-05-05Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller2-1/+4
2011-04-28net: Use non-zero allocations in dst_alloc().David S. Miller1-0/+1
2011-04-28net: Make dst_alloc() take more explicit initializations.David S. Miller1-1/+1
2011-04-26xfrm: Check for the new replay implementation if an esn state is insertedSteffen Klassert1-0/+3
2011-04-26xfrm: Fix replay window size calculation on initializationSteffen Klassert1-1/+1
2011-04-22inet: constify ip headers and in6_addrEric Dumazet1-6/+6
2011-03-31Fix common misspellingsLucas De Marchi1-3/+3
2011-03-28xfrm: Restrict extended sequence numbers to espSteffen Klassert1-0/+3
2011-03-28xfrm: Check for esn buffer len in xfrm_new_aeSteffen Klassert1-0/+21
2011-03-28xfrm: Assign esn pointers when cloning a stateSteffen Klassert1-0/+6
2011-03-28xfrm: Move the test on replay window size into the replay check functionsSteffen Klassert2-3/+16
2011-03-27dst: Clone child entry in skb_dst_popSteffen Klassert1-1/+1
2011-03-27xfrm: Force a dst refcount before entering the xfrm type handlersSteffen Klassert2-0/+4
2011-03-21xfrm: Fix initialize repl field of struct xfrm_stateWei Yongjun2-2/+15
2011-03-16xfrm: Refcount destination entry on xfrm_lookupSteffen Klassert1-0/+2
2011-03-15xfrm: fix __xfrm_route_forward()Eric Dumazet1-2/+2
2011-03-13xfrm: Add user interface for esn and big anti-replay windowsSteffen Klassert2-14/+87
2011-03-13xfrm: Add support for IPsec extended sequence numbersSteffen Klassert2-1/+193
2011-03-13xfrm: Support anti-replay window size bigger than 32 packetsSteffen Klassert1-1/+206
2011-03-13xfrm: Move IPsec replay detection functions to a separate fileSteffen Klassert6-124/+154
2011-03-13xfrm: Use separate low and high order bits of the sequence numbers in xfrm_sk...Steffen Klassert2-3/+3
2011-03-12net: Use flowi4 and flowi6 in xfrm layer.David S. Miller1-12/+16
2011-03-12net: Break struct flowi out into AF specific instances.David S. Miller1-4/+4
2011-03-12net: Make flowi ports AF dependent.David S. Miller1-4/+4
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller2-10/+10
2011-03-12xfrm: Eliminate "fl" and "pol" args to xfrm_bundle_ok().David S. Miller1-19/+3
2011-03-03netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parmsPatrick McHardy1-24/+32
2011-03-02xfrm: Return dst directly from xfrm_lookup()David S. Miller1-17/+17
2011-03-01xfrm: Handle blackhole route creation via afinfo.David S. Miller1-20/+26
2011-03-01xfrm: Kill XFRM_LOOKUP_WAIT flag.David S. Miller1-1/+1
2011-02-27xfrm: Pass const xfrm_address_t objects to xfrm_state_lookup* and xfrm_find_acq.David S. Miller1-4/+8
2011-02-27xfrm: Pass name as const to xfrm_*_get_byname().David S. Miller2-5/+5
2011-02-23xfrm: Const'ify xfrm_address_t args to xfrm_state_find.David S. Miller1-2/+2
2011-02-23xfrm: Remove unused 'saddr' and 'daddr' args to xfrm_state_look_at.David S. Miller1-3/+2
2011-02-23xfrm: Const'ify xfrm_address_t args to __xfrm_state_lookup{,_byaddr}.David S. Miller1-2/+8
2011-02-23xfrm: Const'ify xfrm_tmpl arg to xfrm_init_tempstate.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify xfrm_address_t args to xfrm_*_hash.David S. Miller1-5/+6
2011-02-23xfrm: Const'ify sec_path arg to secpath_has_nontransport.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify ptr args to xfrm_policy_ok.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify ptr args to xfrm_state_ok.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify selector arg to xfrm_dst_update_parent.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify policy arg to clone_policy.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify policy arg and local selector in xfrm_policy_match.David S. Miller1-2/+3
2011-02-23xfrm: Const'ify local xfrm_address_t pointers in xfrm_policy_lookup_bytype.David S. Miller1-1/+1
2011-02-23xfrm: Const'ify selector args in xfrm_migrate paths.David S. Miller1-4/+4
2011-02-23xfrm: Const'ify address args to hash helpers.David S. Miller2-15/+26
2011-02-23xfrm: Const'ify pointer args to km_migrate() and implementations.David S. Miller2-15/+15
2011-02-23xfrm: Const'ify pointer args to migrate_tmpl_match and xfrm_migrate_checkDavid S. Miller1-2/+2
2011-02-23xfrm: Const'ify address arguments to __xfrm_dst_lookup()David S. Miller1-2/+2
2011-02-23xfrm: Const'ify selector argument to xfrm_selector_match()David S. Miller1-3/+3
2011-02-23xfrm: Pass km_event pointers around as const when possible.David S. Miller2-14/+14
2011-02-22net: Make flow cache paths use a const struct flowi.David S. Miller1-5/+8
2011-02-22xfrm: Mark flowi arg to xfrm_resolve_and_create_bundle() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to xfrm_dst_{alloc_copy,update_origin}() const.David S. Miller1-2/+2
2011-02-22xfrm: Mark flowi arg to xfrm_bundle_create() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to xfrm_tmpl_resolve{,_one}() const.David S. Miller1-6/+4
2011-02-22xfrm: Mark flowi arg to xfrm_expand_policies() const.David S. Miller1-2/+2
2011-02-22xfrm: Mark flowi arg to xfrm_policy_{lookup_by_type,match}() const.David S. Miller1-2/+2
2011-02-22xfrm: Kill strict arg to xfrm_bundle_ok().David S. Miller1-8/+3
2011-02-22xfrm: Mark flowi arg to xfrm_state_find() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to xfrm_init_tempstate() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to xfrm_state_look_at() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to xfrm_selector_match() const.David S. Miller1-4/+4
2011-02-22xfrm: Mark flowi arg to xfrm_type->reject() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to ->fill_dst() const.David S. Miller1-1/+1
2011-02-22xfrm: Mark flowi arg to ->get_tos() const.David S. Miller1-1/+1
2011-02-19Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-2/+5
2011-02-17net: Add initial_ref arg to dst_alloc().David S. Miller1-1/+1
2011-02-10xfrm: avoid possible oopse in xfrm_alloc_dstHiroaki SHIMODA1-2/+5
2011-01-19Revert "netlink: test for all flags of the NLM_F_DUMP composite"David S. Miller1-1/+1
2011-01-11xfrm: check trunc_len in XFRMA_ALG_AUTH_TRUNCNicolas Dichtel1-1/+3
2011-01-09netlink: test for all flags of the NLM_F_DUMP compositeJan Engelhardt1-1/+1
2010-12-17Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-1/+1
2010-12-14net: Abstract default MTU metric calculation behind an accessor.David S. Miller1-0/+7
2010-12-13net: Abstract default ADVMSS behind an accessor.David S. Miller1-0/+7
2010-12-10xfrm: Add Traffic Flow Confidentiality padding XFRM attributeMartin Willi1-2/+17
2010-12-09xfrm: Fix xfrm_state_migrate leakThomas Egerer1-1/+1
2010-12-09net: Abstract away all dst_entry metrics accesses.David S. Miller1-3/+3
2010-11-21net: allow GFP_HIGHMEM in __vmalloc()Eric Dumazet1-1/+1
2010-10-21xfrm: make xfrm_bundle_ok localstephen hemminger1-3/+4
2010-09-20xfrm: Allow different selector family in temporary stateThomas Egerer2-21/+29
2010-09-16xfrm: dont assume rcu_read_lock in xfrm_output_one()Eric Dumazet1-1/+1
2010-09-01xfrm_user: avoid a warning with some compilerNicolas Dichtel1-1/+1
2010-08-14xfrm: Use GFP_ATOMIC in xfrm_compile_policyHerbert Xu1-1/+1
2010-07-20Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-2/+13
2010-07-14xfrm: do not assume that template resolving always returns xfrmsTimo Teräs1-2/+13
2010-07-07Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-1/+2
2010-06-25snmp: add align parameter to snmp_mib_init()Eric Dumazet1-1/+2
2010-06-24xfrm: check bundle policy existance before dereferencing itTimo Teräs1-1/+2
2010-06-04net: check for refcount if pop a stacked dst_entrySteffen Klassert1-2/+2
2010-06-02xfrm: force a dst reference in __xfrm_route_forward()Eric Dumazet1-0/+1
2010-05-17net: Remove unnecessary returns from void function()sJoe Perches1-1/+0
2010-05-17xfrm: add severity to printkstephen hemminger1-5/+7
2010-05-17net: Remove unnecessary semicolons after switch statementsJoe Perches1-3/+3