Steffen Klassert 5e4334dc39 xfrm: Add an inbound percpu state cache. ...

[ Upstream commit 81a331a0e7 ]

Now that we can have percpu xfrm states, the number of active
states might increase. To get a better lookup performance,
we add a percpu cache to cache the used inbound xfrm states.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Tested-by: Antony Antony <antony.antony@secunet.com>
Tested-by: Tobias Brunner <tobias@strongswan.org>
Stable-dep-of: e952837f3d ("xfrm: state: fix out-of-bounds read during lookup")
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-08 09:58:00 +01:00

19 KiB

Raw Blame History

View Raw