mbox

[0/6] pull request (net): ipsec 2022-11-23

Message ID 20221123093117.434274-1-steffen.klassert@secunet.com (mailing list archive)
State Accepted
Headers show

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

Message

Steffen Klassert Nov. 23, 2022, 9:31 a.m. UTC
1) Fix "disable_policy" on ipv4 early demuxP Packets after
   the initial packet in a flow might be incorectly dropped
   on early demux if there are no matching policies.
   From Eyal Birger.

2) Fix a kernel warning in case XFRM encap type is not
   available. From Eyal Birger.

3) Fix ESN wrap around for GSO to avoid a double usage of a
    sequence number. From Christian Langrock.

4) Fix a send_acquire race with pfkey_register.
   From Herbert Xu.

5) Fix a list corruption panic in __xfrm_state_delete().
   Thomas Jarosch.

6) Fix an unchecked return value in xfrm6_init().
   Chen Zhongjin.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 1d22f78d05737ce21bff7b88b6e58873f35e65ba:

  Merge tag 'ieee802154-for-net-2022-10-05' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan (2022-10-05 20:38:46 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 40781bfb836eda57d19c0baa37c7e72590e05fdc:

  xfrm: Fix ignored return value in xfrm6_init() (2022-11-22 07:16:34 +0100)

----------------------------------------------------------------
Chen Zhongjin (1):
      xfrm: Fix ignored return value in xfrm6_init()

Christian Langrock (1):
      xfrm: replay: Fix ESN wrap around for GSO

Eyal Birger (2):
      xfrm: fix "disable_policy" on ipv4 early demux
      xfrm: lwtunnel: squelch kernel warning in case XFRM encap type is not available

Herbert Xu (1):
      af_key: Fix send_acquire race with pfkey_register

Thomas Jarosch (1):
      xfrm: Fix oops in __xfrm_state_delete()

 net/core/lwtunnel.c     |  4 +++-
 net/ipv4/esp4_offload.c |  3 +++
 net/ipv4/ip_input.c     |  5 +++++
 net/ipv6/esp6_offload.c |  3 +++
 net/ipv6/xfrm6_policy.c |  6 +++++-
 net/key/af_key.c        | 34 +++++++++++++++++++++++-----------
 net/xfrm/xfrm_device.c  | 15 ++++++++++++++-
 net/xfrm/xfrm_replay.c  |  2 +-
 8 files changed, 57 insertions(+), 15 deletions(-)

Comments

Alexander Lobakin Nov. 24, 2022, 5:38 p.m. UTC | #1
From: Steffen Klassert <steffen.klassert@secunet.com>
Date: Wed, 23 Nov 2022 10:31:10 +0100

> 1) Fix "disable_policy" on ipv4 early demuxP Packets after
>    the initial packet in a flow might be incorectly dropped
>    on early demux if there are no matching policies.
>    From Eyal Birger.
> 
> 2) Fix a kernel warning in case XFRM encap type is not
>    available. From Eyal Birger.
> 
> 3) Fix ESN wrap around for GSO to avoid a double usage of a
>     sequence number. From Christian Langrock.
> 
> 4) Fix a send_acquire race with pfkey_register.
>    From Herbert Xu.
> 
> 5) Fix a list corruption panic in __xfrm_state_delete().
>    Thomas Jarosch.
> 
> 6) Fix an unchecked return value in xfrm6_init().
>    Chen Zhongjin.
> 
> Please pull or let me know if there are problems.
> 
> Thanks!
> 
> The following changes since commit 1d22f78d05737ce21bff7b88b6e58873f35e65ba:
> 
>   Merge tag 'ieee802154-for-net-2022-10-05' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan (2022-10-05 20:38:46 -0700)
> 
> are available in the Git repository at:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master
> 
> for you to fetch changes up to 40781bfb836eda57d19c0baa37c7e72590e05fdc:
> 
>   xfrm: Fix ignored return value in xfrm6_init() (2022-11-22 07:16:34 +0100)
> 
> ----------------------------------------------------------------
> Chen Zhongjin (1):
>       xfrm: Fix ignored return value in xfrm6_init()
> 
> Christian Langrock (1):
>       xfrm: replay: Fix ESN wrap around for GSO
> 
> Eyal Birger (2):
>       xfrm: fix "disable_policy" on ipv4 early demux
>       xfrm: lwtunnel: squelch kernel warning in case XFRM encap type is not available
> 
> Herbert Xu (1):
>       af_key: Fix send_acquire race with pfkey_register
> 
> Thomas Jarosch (1):
>       xfrm: Fix oops in __xfrm_state_delete()
> 
>  net/core/lwtunnel.c     |  4 +++-
>  net/ipv4/esp4_offload.c |  3 +++
>  net/ipv4/ip_input.c     |  5 +++++
>  net/ipv6/esp6_offload.c |  3 +++
>  net/ipv6/xfrm6_policy.c |  6 +++++-
>  net/key/af_key.c        | 34 +++++++++++++++++++++++-----------
>  net/xfrm/xfrm_device.c  | 15 ++++++++++++++-
>  net/xfrm/xfrm_replay.c  |  2 +-
>  8 files changed, 57 insertions(+), 15 deletions(-)

(for the whole PR)

Reviewed-by: Alexander Lobakin <alexandr.lobakin@intel.com>

Thanks,
Olek