raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2025-12-06 01:49:46 +00:00
Code Issues Projects Releases Wiki Activity
Files
56f974d583fcf7c8bb8b62d5164315de25268079
linux/net/xfrm
History
Ghalem Boudour 56f974d583 xfrm: fix policy lookup for ipv6 gre packets 
commit bcf141b2eb upstream.

On egress side, xfrm lookup is called from __gre6_xmit() with the
fl6_gre_key field not initialized leading to policies selectors check
failure. Consequently, gre packets are sent without encryption.

On ingress side, INET6_PROTO_NOPOLICY was set, thus packets were not
checked against xfrm policies. Like for egress side, fl6_gre_key should be
correctly set, this is now done in decode_session6().

Fixes: c12b395a46 ("gre: Support GRE over IPv6")
Cc: stable@vger.kernel.org
Signed-off-by: Ghalem Boudour <ghalem.boudour@6wind.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-01-27 10:54:26 +01:00
..
espintcp.c
espintcp: restore IP CB before handing the packet to xfrm
2020-08-17 15:58:04 +02:00
Kconfig
xfrm/compat: Add 32=>64-bit messages translator
2020-09-24 08:53:03 +02:00
Makefile
xfrm: Provide API to register translator module
2020-09-24 08:53:03 +02:00
xfrm_algo.c
crypto: skcipher - remove the "blkcipher" algorithm type
2019-11-01 13:38:32 +08:00
xfrm_compat.c
xfrm: rate limit SA mapping change message to user space
2022-01-27 10:54:18 +01:00
xfrm_device.c
xfrm: Fix xfrm offload fallback fail case
2021-07-14 16:56:25 +02:00
xfrm_hash.c
mm: remove include/linux/bootmem.h
2018-10-31 08:54:16 -07:00
xfrm_hash.h
xfrm: use complete IPv6 addresses for hash
2018-10-15 10:09:18 +02:00
xfrm_inout.h
xfrm: move xfrm4_extract_header to common helper
2020-05-06 09:40:08 +02:00
xfrm_input.c
xfrm: Fix oops in xfrm_replay_advance_bmp
2021-02-03 23:28:45 +01:00
xfrm_interface.c
xfrm: interface with if_id 0 should return error
2022-01-27 10:53:57 +01:00
xfrm_ipcomp.c
net: xfrm: Fix end of loop tests for list_for_each_entry
2021-08-26 08:35:35 -04:00
xfrm_output.c
xfrm: remove the fragment check for ipv6 beet mode
2021-07-14 16:56:19 +02:00
xfrm_policy.c
xfrm: fix policy lookup for ipv6 gre packets
2022-01-27 10:54:26 +01:00
xfrm_proc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
xfrm_replay.c
xfrm: introduce oseq-may-wrap flag
2020-06-24 07:51:01 +02:00
xfrm_state.c
xfrm: rate limit SA mapping change message to user space
2022-01-27 10:54:18 +01:00
xfrm_sysctl.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xfrm_user.c
xfrm: rate limit SA mapping change message to user space
2022-01-27 10:54:18 +01:00