Tobias Brunner 1670d15847 esp6: Fix integrity verification when ESN are used ...

commit a55e23864d upstream.

When handling inbound packets, the two halves of the sequence number
stored on the skb are already in network order.

Fixes: 000ae7b269 ("esp6: Switch to new AEAD interface")
Signed-off-by: Tobias Brunner <tobias@strongswan.org>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-12-10 19:09:44 +01:00

..

ila

ila: Fix checksum neutral mapping

2016-06-15 21:40:00 -07:00

netfilter

netfilter: nft_chain_route: re-route before skb is queued to userspace

2016-09-06 18:02:37 +02:00

addrconf_core.c

ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument

2015-07-31 15:21:30 -07:00

addrconf.c

ipv6: bump genid when the IFA_F_TENTATIVE flag is clear

2016-12-10 19:09:38 +01:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2016-07-29 17:38:46 -07:00

ah6.c

ah6: fix error return code

2015-08-25 13:37:31 -07:00

anycast.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

calipso.c

calipso: fix resource leak on calipso_genopt failure

2016-08-13 14:56:17 -07:00

datagram.c

sock: propagate __sock_cmsg_send() error

2016-05-16 13:46:23 -04:00

esp6.c

esp6: Fix integrity verification when ESN are used

2016-12-10 19:09:44 +01:00

exthdrs_core.c

ipv6: constify the skb pointer of ipv6_find_tlv().

2016-06-27 15:06:15 -04:00

exthdrs_offload.c

ipv6: fix exthdrs offload registration in out_rt path

2015-09-02 15:31:00 -07:00

exthdrs.c

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

fib6_rules.c

net: Add l3mdev rule

2016-06-08 11:36:02 -07:00

fou6.c

fou: add Kconfig options for IPv6 support

2016-05-29 22:24:21 -07:00

icmp.c

net: icmp6_send should use dst dev to determine L3 domain

2016-11-21 10:11:35 +01:00

inet6_connection_sock.c

soreuseport: fast reuseport TCP socket selection

2016-02-11 03:54:15 -05:00

inet6_hashtables.c

net: rename NET_{ADD|INC}_STATS_BH()

2016-04-27 22:48:24 -04:00

ip6_checksum.c

ipv6: fix checksum annotation in udp6_csum_init

2016-06-14 15:26:42 -04:00

ip6_fib.c

ipv6: Fix mem leak in rt6i_pcpu

2016-07-05 14:09:23 -07:00

ip6_flowlabel.c

ipv6: add new struct ipcm6_cookie

2016-05-03 16:08:14 -04:00

ip6_gre.c

ip6_gre: fix flowi6_proto value in ip6gre_xmit_other()

2016-09-24 09:44:31 -04:00

ip6_icmp.c

ipv6: icmp: add a force_saddr param to icmp6_send()

2016-06-18 22:11:38 -07:00

ip6_input.c

net: vrf: ipv6 support for local traffic to local addresses

2016-06-08 00:25:38 -07:00

ip6_offload.c

ip6_offload: check segs for NULL in ipv6_gso_segment.

2016-12-10 19:09:40 +01:00

ip6_offload.h

udp: Add GRO functions to UDP socket

2016-04-07 16:53:29 -04:00

ip6_output.c

net: vrf: Implement get_saddr for IPv6

2016-06-17 21:25:29 -07:00

ip6_tunnel.c

Revert: "ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit()"

2016-12-10 19:09:44 +01:00

ip6_udp_tunnel.c

ip_tunnel: add support for setting flow label via collect metadata

2016-03-11 15:14:26 -05:00

ip6_vti.c

vti6: fix input path

2016-09-21 10:09:14 +02:00

ip6mr.c

ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route

2016-09-25 23:41:39 -04:00

ipcomp6.c

ipv6: White-space cleansing : Structure layouts

2014-08-24 22:37:52 -07:00

ipv6_sockglue.c

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

Kconfig

fou: fix IPv6 Kconfig options

2016-05-31 14:07:49 -07:00

Makefile

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

mcast_snoop.c

net: fix wrong skb_get() usage / crash in IGMP/MLD parsing code

2015-08-13 17:08:39 -07:00

mcast.c

mld, igmp: Fix reserved tailroom calculation

2016-03-03 15:41:07 -05:00

mip6.c

ipv6: use ktime_t for internal timestamps

2015-10-05 03:16:47 -07:00

ndisc.c

ipv6: export several functions

2016-06-15 20:41:23 -07:00

netfilter.c

ipv6: Pass struct net into ip6_route_me_harder

2015-09-29 20:21:32 +02:00

output_core.c

ipv6: Set skb->protocol properly for local output

2016-12-10 19:09:43 +01:00

ping.c

ipv6: release dst in ping_v6_sendmsg

2016-09-06 12:54:17 -07:00

proc.c

udp: Increment UDP_MIB_IGNOREDMULTI for arriving unmatched multicasts

2014-11-07 15:45:50 -05:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

ipv6: use TOS marks from sockets for routing decision

2016-06-11 15:33:26 -07:00

reassembly.c

ipv6: rename IP6_INC_STATS_BH()

2016-04-27 22:48:24 -04:00

route.c

net: ipv6: Do not consider link state for nexthop validation

2016-11-15 07:48:53 +01:00

sit.c

sit: support MPLS over IPv4

2016-07-09 17:45:56 -04:00

syncookies.c

net: rename NET_{ADD|INC}_STATS_BH()

2016-04-27 22:48:24 -04:00

sysctl_net_ipv6.c

calipso: Add a label cache.

2016-06-27 15:06:17 -04:00

tcp_ipv6.c

tcp: take care of truncations done by sk_filter()

2016-11-21 10:11:36 +01:00

tcpv6_offload.c

tcp: cleanup static functions

2015-02-28 16:56:51 -05:00

tunnel6.c

ipv6: fix tunnel error handling

2015-11-03 10:52:13 -05:00

udp_impl.h

udplite: call proper backlog handlers

2016-12-10 19:09:38 +01:00

udp_offload.c

gso: Remove arbitrary checks for unsupported GSO

2016-05-20 18:03:15 -04:00

udp.c

udplite: call proper backlog handlers

2016-12-10 19:09:38 +01:00

udplite.c

udplite: call proper backlog handlers

2016-12-10 19:09:38 +01:00

xfrm6_input.c

vti6: fix input path

2016-09-21 10:09:14 +02:00

xfrm6_mode_beet.c

xfrm: simplify xfrm_address_t use

2015-03-31 13:58:35 -04:00

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-15 15:07:23 -05:00

xfrm6_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-10-24 06:54:12 -07:00

xfrm6_policy.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

2016-09-08 13:12:37 -07:00

xfrm6_protocol.c

xfrm6: Properly handle unsupported protocols

2014-05-06 07:08:38 +02:00

xfrm6_state.c

ipv6: White-space cleansing : Line Layouts

2014-08-24 22:37:52 -07:00

xfrm6_tunnel.c

vti6: fix input path

2016-09-21 10:09:14 +02:00