aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_policy.c
AgeCommit message (Expand)AuthorFilesLines
12 daysMerge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+2
2024-05-06Merge tag 'ipsec-next-2024-05-03' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-0/+6
2024-05-01xfrm: Add dir validation to "out" data path lookupAntony Antony1-0/+6
2024-04-29ipv6: introduce dst_rt6_info() helperEric Dumazet1-2/+1
2024-04-11xfrm: fix possible derferencing in error pathAntony Antony1-0/+2
2024-03-08Merge tag 'ipsec-next-2024-03-06' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-6/+141
2024-03-05xfrm: fix xfrm child route lookup for packet offloadMike Yu1-1/+3
2024-02-09xfrm: Simplify the allocation of slab caches in xfrm_policy_initKunwu Chan1-4/+1
2024-01-25xfrm: introduce forwarding of ICMP Error messagesAntony Antony1-2/+140
2024-01-17xfrm: Clear low order bits of ->flowi4_tos in decode_session4().Guillaume Nault1-1/+1
2023-12-14bpf: xfrm: Add bpf_xdp_get_xfrm_state() kfuncDaniel Xu1-0/+2
2023-10-30Merge tag 'ipsec-next-2023-10-28' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-174/+125
2023-10-27xfrm: policy: fix layer 4 flowi decodingFlorian Westphal1-6/+20
2023-10-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-11/+16
2023-10-13xfrm: fix a data-race in xfrm_lookup_with_ifid()Eric Dumazet1-1/+1
2023-10-06xfrm: policy: replace session decode with flow dissectorFlorian Westphal1-158/+95
2023-10-06xfrm: move mark and oif flowi decode into common codeFlorian Westphal1-12/+12
2023-10-06xfrm: pass struct net to xfrm_decode_session wrappersFlorian Westphal1-5/+5
2023-09-13xfrm: fix a data-race in xfrm_gen_index()Eric Dumazet1-4/+2
2023-09-12net: dst: remove unnecessary input parameter in dst_alloc and dst_initZhengchao Shao1-1/+1
2023-09-05net: xfrm: skip policies marked as dead while reinserting policiesDong Chenchen1-6/+13
2023-07-29net: annotate data-races around sk->sk_markEric Dumazet1-1/+1
2023-06-07xfrm: add missed call to delete offloaded policiesLeon Romanovsky1-0/+2
2023-05-21xfrm: Treat already-verified secpath entries as optionalBenedict Wong1-0/+12
2023-05-10xfrm: Check if_id in inbound policy/secpath matchBenedict Wong1-5/+6
2023-04-25Revert "Fix XFRM-I support for nested ESP tunnels"Martin Willi1-3/+0
2023-04-06xfrm: don't check the default policy if the policy allows the packetSabrina Dubroca1-6/+0
2023-01-27xfrm: annotate data-race around use_timeEric Dumazet1-4/+7
2023-01-09Fix XFRM-I support for nested ESP tunnelsBenedict Wong1-0/+3
2022-12-05xfrm: speed-up lookup of HW policiesLeon Romanovsky1-5/+11
2022-12-05xfrm: add an interface to offload policyLeon Romanovsky1-0/+69
2022-11-25xfrm: add extack to xfrm_do_migrateSabrina Dubroca1-8/+20
2022-11-25xfrm: a few coding style clean upsSabrina Dubroca1-3/+6
2022-10-25xfrm: Remove not-used total variableLeon Romanovsky1-2/+2
2022-10-03Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-13/+12
2022-08-29xfrm: interface: support collect metadata modeEyal Birger1-5/+5
2022-08-23xfrm: Drop unused argumentHongbin Wang1-8/+7
2022-08-17xfrm: policy: fix metadata dst->dev xmit null pointer dereferenceNikolay Aleksandrov1-1/+1
2022-07-26xfrm: fix refcount leak in __xfrm_policy_check()Xin Xiong1-0/+1
2022-06-02xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()Hangyu Hua1-1/+4
2022-05-17xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdownXin Long1-1/+1
2022-04-04xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookupDavid Ahern1-1/+3
2022-03-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-3/+7
2022-03-18xfrm: rework default policy structureNicolas Dichtel1-3/+7
2022-01-26xfrm: Check if_id in xfrm_migrateYan Yan1-6/+8
2022-01-11xfrm: Don't accidentally set RTO_ONLINK in decode_session4()Guillaume Nault1-1/+2
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+21
2021-12-01net: xfrm: drop check of pols[0] for the second timeJean Sacren1-1/+1
2021-11-23xfrm: fix policy lookup for ipv6 gre packetsGhalem Boudour1-0/+21
2021-11-18xfrm: Remove duplicate assignmentluo penghao1-1/+0
2021-10-18xfrm: Use memset_after() to clear paddingKees Cook1-3/+1
2021-08-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-0/+16
2021-08-04Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-20/+12
2021-07-21xfrm: Add possibility to set the default to block if we have no policySteffen Klassert1-0/+16
2021-07-02xfrm: Fix RCU vs hash_resize_mutex lock inversionFrederic Weisbecker1-9/+8
2021-07-02Revert "xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_l...Steffen Klassert1-14/+7
2021-06-30Merge tag 'net-next-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds1-8/+15
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-7/+14
2021-06-23Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-7/+14
2021-06-11xfrm: policy: fix a spelling mistakegushengxian1-1/+1
2021-06-01xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_lookup_by...Varad Gautam1-7/+14
2021-05-10selinux: delete selinux_xfrm_policy_lookup() useless argumentZhongjun Tan1-4/+2
2021-04-19xfrm: remove stray synchronize_rcu from xfrm_initFlorian Westphal1-3/+0
2021-04-19flow: remove spi key from flowi structFlorian Westphal1-39/+0
2021-03-28xfrm_policy.c : Mundane typo fixBhaskar Chowdhury1-1/+1
2021-01-04xfrm: Fix wraparound in xfrm_policy_addr_delta()Visa Hankala1-8/+18
2021-01-04xfrm: fix disable_xfrm sysctl when used on xfrm interfacesEyal Birger1-2/+2
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-08-10Merge tag 'locking-urgent-2020-08-10' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-5/+5
2020-08-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-25/+18
2020-07-29xfrm: policy: Use sequence counters with associated lockAhmed S. Darwish1-5/+5
2020-07-21xfrm: Make the policy hold queue work with VTI.Steffen Klassert1-0/+11
2020-07-17xfrm: policy: fix IPv6-only espintcp compilationSabrina Dubroca1-2/+2
2020-06-24xfrm: policy: match with both mark and mask on user interfacesXin Long1-23/+16
2020-05-25xfrm: fix a warning in xfrm_policy_insert_listXin Long1-6/+1
2020-03-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+2
2020-03-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+2
2020-03-24xfrm: policy: Fix doulbe free in xfrm_policy_timerYueHaibing1-0/+2
2020-03-23Remove DST_HOSTDavid Laight1-2/+1
2020-02-04treewide: remove redundant IS_ERR() before error code checkMasahiro Yamada1-1/+1
2019-12-09xfrm: add espintcp (RFC 8229)Sabrina Dubroca1-0/+7
2019-10-01netfilter: drop bridge nf reset from nf_resetFlorian Westphal1-1/+1
2019-09-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+4
2019-08-24xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md modeHangbin Liu1-2/+2
2019-08-20xfrm: policy: avoid warning splat when merging nodesFlorian Westphal1-2/+4
2019-07-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-8/+7
2019-07-05Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-8/+7
2019-07-03xfrm: policy: fix bydst hlist corruption on hash rebuildFlorian Westphal1-5/+7
2019-07-02xfrm: remove a duplicated assignmentCong Wang1-3/+0
2019-06-06xfrm: remove state and template sort indirections from xfrm_state_afinfoFlorian Westphal1-1/+1
2019-05-21Merge tag 'spdx-5.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds1-0/+1
2019-05-21treewide: Add SPDX license identifier for missed filesThomas Gleixner1-0/+1
2019-05-16xfrm: ressurrect "Fix uninitialized memory read in _decode_session4"Florian Westphal1-11/+13
2019-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2019-04-23xfrm: remove decode_session indirection from afinfo_policyFlorian Westphal1-9/+222
2019-04-23xfrm: remove init_path indirection from afinfo_policyFlorian Westphal1-14/+7
2019-04-23xfrm: remove tos indirection from afinfo_policyFlorian Westphal1-11/+3
2019-04-08xfrm: store xfrm_mode directly, not its addressFlorian Westphal1-1/+1
2019-04-08xfrm: make xfrm modes builtinFlorian Westphal1-1/+1
2019-04-08xfrm: remove afinfo pointer from xfrm_modeFlorian Westphal1-1/+9
2019-03-27xfrm: Honor original L3 slave device in xfrmi policy lookupMartin Willi1-1/+1
2019-02-18xfrm: Fix inbound traffic via XFRM interfaces across network namespacesTobias Brunner1-1/+3
2019-01-16xfrm: Make set-mark default behavior backward compatibleBenedict Wong1-1/+4
2019-01-09xfrm: policy: fix infinite loop when merging src-nodesFlorian Westphal1-8/+7
2019-01-09xfrm: policy: fix reinsertion on node mergeFlorian Westphal1-6/+8
2019-01-09xfrm: policy: delete inexact policies from inexact list on hash rebuildFlorian Westphal1-13/+10
2019-01-09xfrm: policy: increment xfrm_hash_generation on hash rebuildFlorian Westphal1-0/+2
2019-01-09xfrm: policy: use hlist rcu variants on inexact insert, part 2Florian Westphal1-2/+2
2018-12-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-3/+0
2018-12-19net: use skb_sec_path helper in more placesFlorian Westphal1-8/+11
2018-12-19xfrm: policy: remove set but not used variable 'priority'YueHaibing1-3/+0
2018-11-28xfrm: policy: fix policy hash rebuildFlorian Westphal1-4/+5
2018-11-15xfrm: policy: fix netlink/pf_key policy lookupsFlorian Westphal1-1/+4
2018-11-15xfrm: policy: add missing indentationColin Ian King1-1/+1
2018-11-09xfrm: policy: add 2nd-level saddr trees for inexact policiesFlorian Westphal1-10/+108
2018-11-09xfrm: policy: store inexact policies in a tree ordered by source addressFlorian Westphal1-4/+42
2018-11-09xfrm: policy: check reinserted policies match their nodeFlorian Westphal1-0/+32
2018-11-09xfrm: policy: store inexact policies in a tree ordered by destination addressFlorian Westphal1-6/+327
2018-11-09xfrm: policy: add inexact policy search tree infrastructureFlorian Westphal1-54/+247
2018-11-09xfrm: policy: consider if_id when hashing inexact policyFlorian Westphal1-9/+16
2018-11-09xfrm: policy: store inexact policies in an rhashtableFlorian Westphal1-18/+332
2018-11-09xfrm: policy: return NULL when inexact search neededFlorian Westphal1-2/+11
2018-11-09xfrm: policy: split list insertion into a helperFlorian Westphal1-16/+27
2018-11-09xfrm: security: iterate all, not inexact listsFlorian Westphal1-67/+26
2018-10-11xfrm: policy: use hlist rcu variants on insertFlorian Westphal1-4/+4
2018-10-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+4
2018-09-11xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.Steffen Klassert1-0/+4
2018-08-02Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+3
2018-07-26xfrm: fix 'passing zero to ERR_PTR()' warningYueHaibing1-1/+4
2018-07-20xfrm: Remove xfrmi interface ID from flowiBenedict Wong1-32/+66
2018-07-11xfrm: use time64_t for in-kernel timestampsArnd Bergmann1-12/+12
2018-06-25xfrm: policy: remove pcpu policy cacheFlorian Westphal1-138/+1
2018-06-23xfrm: Add virtual xfrm interfacesSteffen Klassert1-0/+43
2018-06-23xfrm: Add a new lookup key to match xfrm interfaces.Steffen Klassert1-5/+13
2018-06-23xfrm: Extend the output_mark to support input direction and masking.Steffen Klassert1-2/+3
2018-06-23xfrm: fix missing dst_release() after policy blocking lbcast and multicastTommi Rantala1-0/+3
2018-05-31xfrm Fix potential error pointer dereference in xfrm_bundle_create.Steffen Klassert1-3/+2
2018-03-30xfrm: Register xfrm_dev_notifier in appropriate placeKirill Tkhai1-2/+1
2018-03-29Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+2
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai1-1/+0
2018-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+8
2018-03-07xfrm_policy: use true and false for boolean valuesGustavo A. R. Silva1-1/+1
2018-02-27xfrm: mark kmem_caches as __ro_after_initAlexey Dobriyan1-1/+1
2018-02-20xfrm: Fix infinite loop in xfrm_get_dst_nexthop with transport mode.Steffen Klassert1-2/+2
2018-02-19xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tosXin Long1-2/+5
2018-02-13net: Convert pernet_subsys, registered from inet_init()Kirill Tkhai1-0/+1
2018-02-13xfrm: Fix policy hold queue after flowcache removal.Steffen Klassert1-1/+1
2018-01-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+11
2018-01-10xfrm: Fix a race in the xdst pcpu cache.Steffen Klassert1-1/+7
2018-01-08xfrm: don't call xfrm_policy_cache_flush while holding spinlockFlorian Westphal1-2/+2
2017-12-30xfrm: skip policies marked as dead while rehashingFlorian Westphal1-1/+2
2017-12-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+8
2017-12-15Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+1
2017-12-12xfrm: put policies when reusing pcpu xdst entryFlorian Westphal1-0/+1
2017-12-01xfrm: Fix stack-out-of-bounds read on socket policy lookup.Steffen Klassert1-1/+7
2017-11-30xfrm: Stop using dst->next in bundle construction.David Miller1-24/+32
2017-11-30xfrm: Move dst->path into struct xfrm_dstDavid Miller1-14/+14
2017-11-30ipsec: Create and use new helpers for dst child access.David Miller1-24/+23
2017-11-30net: Create and use new helper xfrm_dst_child().David Miller1-7/+7
2017-11-30net: xfrm: allow clearing socket xfrm policies.Lorenzo Colitti1-1/+1
2017-11-16Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-11/+19
2017-11-15Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find."Steffen Klassert1-11/+18
2017-11-14xfrm: Copy policy family in clone_policyHerbert Xu1-0/+1
2017-11-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-36/+35
2017-11-03xfrm: Fix stack-out-of-bounds read in xfrm_state_find.Steffen Klassert1-18/+11
2017-11-03xfrm: do unconditional template resolution before pcpu cache checkFlorian Westphal1-18/+24
2017-11-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+0
2017-10-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-8/+8
2017-10-24xfrm: Fix xfrm_dst_cache memleakSteffen Klassert1-1/+0
2017-10-18xfrm: Convert timers to use timer_setup()Kees Cook1-9/+8
2017-10-11ipsec: Fix dst leak in xfrm_bundle_create().David Miller1-8/+8
2017-09-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+6
2017-08-24net: xfrm: don't double-hold dst when sk_policy in use.Lorenzo Colitti1-1/+0
2017-08-21Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-8/+9
2017-08-11net: xfrm: support setting an output mark.Lorenzo Colitti1-8/+9
2017-08-07xfrm: check that cached bundle is still validFlorian Westphal1-1/+2
2017-08-03xfrm: policy: check policy direction valueVladis Dronov1-0/+6
2017-07-18xfrm: add xdst pcpu cacheFlorian Westphal1-1/+126
2017-07-18xfrm: remove flow cacheFlorian Westphal1-107/+1
2017-07-18xfrm_policy: make xfrm_bundle_lookup return xfrm dst objectFlorian Westphal1-16/+12
2017-07-18xfrm_policy: remove xfrm_policy_lookupFlorian Westphal1-32/+4
2017-07-18xfrm_policy: kill flow to policy dir conversionFlorian Westphal1-42/+4
2017-07-18xfrm_policy: remove always true/false branchesFlorian Westphal1-60/+14
2017-07-18xfrm_policy: bypass flow_cache_lookupFlorian Westphal1-9/+5
2017-07-04net, xfrm: convert xfrm_policy.refcnt from atomic_t to refcount_tReshetova, Elena1-2/+2
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+0
2017-06-23Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-8/+5
2017-06-17net: remove DST_NOCACHE flagWei Wang1-1/+0
2017-06-17net: remove DST_NOGC flagWei Wang1-1/+1
2017-06-17xfrm: take refcnt of dst when creating struct xfrm_dst bundleWei Wang1-18/+30
2017-06-12xfrm: move xfrm_garbage_collect out of xfrm_policy_flushHangbin Liu1-4/+0
2017-06-07xfrm: add UDP encapsulation port in migrate messageAntony Antony1-1/+1
2017-06-07xfrm: extend MIGRATE with UDP encapsulation portAntony Antony1-7/+4
2017-05-04xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICYSabrina Dubroca1-47/+0
2017-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-21/+6
2017-04-26xfrm: do the garbage collection after flushing policyXin Long1-0/+4
2017-04-14xfrm: Add an IPsec hardware offloading APISteffen Klassert1-5/+5
2017-04-14xfrm: Move device notifications to a sepatate fileSteffen Klassert1-16/+1
2017-03-07Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-10/+9
2017-02-26xfrm: provide correct dst in xfrm_neigh_lookupJulian Anastasov1-8/+21