Willy Tarreau
2e1591c27b
tcp: drop the hash_32() part from the index calculation ...
commit e8161345ddbb66e449abde10d2fdce93f867eba9 upstream.
In commit 190cc82489f4 ("tcp: change source port randomizarion at
connect() time"), the table_perturb[] array was introduced and an
index was taken from the port_offset via hash_32(). But it turns
out that hash_32() performs a multiplication while the input here
comes from the output of SipHash in secure_seq, that is well
distributed enough to avoid the need for yet another hash.
Suggested-by: Amit Klein <aksecurity@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Cc: Ben Hutchings <ben@decadent.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-06-25 12:44:36 +02:00
6lowpan: iphc: Fix an off-by-one check of array index
2021-09-15 09:47:31 +02:00
xen/9p: use alloc/free_pages_exact()
2022-03-11 11:22:39 +01:00
net/802/garp: fix memleak in garp_request_join()
2021-07-31 08:19:38 +02:00
net: vlan: fix underflow for the real_dev refcnt
2021-12-01 09:23:34 +01:00
ax25: Fix UAF bugs in ax25 timers
2022-04-20 09:19:40 +02:00
batman-adv: Don't skb_split skbuffs with frag_list
2022-05-18 09:47:24 +02:00
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
2022-06-14 18:11:37 +02:00
net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
2022-05-25 09:14:36 +02:00
net-caif: avoid user-triggerable WARN_ON(1)
2021-09-22 12:26:40 +02:00
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
2021-12-08 09:01:08 +01:00
bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
2022-06-06 08:33:51 +02:00
net: dcb: disable softirqs in dcbnl_flush_dev()
2022-03-08 19:07:51 +01:00
tcp: fix race condition when creating child sockets from syncookies
2022-04-27 13:50:45 +02:00
net: decnet: Fix sleeping inside in af_decnet
2021-07-28 13:30:56 +02:00
net: dsa: Add missing of_node_put() in dsa_port_parse_of
2022-03-23 09:12:07 +01:00
net: ieee802154: Return meaningful error codes from the netlink helpers
2022-02-08 18:24:31 +01:00
tcp: drop the hash_32() part from the index calculation
2022-06-25 12:44:36 +02:00
net: ipv6: unexport __init-annotated seg6_hmac_init()
2022-06-14 18:11:58 +02:00
Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
2022-06-14 18:12:01 +02:00
ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
2022-06-22 14:11:21 +02:00
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-27 13:50:47 +02:00
llc: only change llc->dev when bind() succeeds
2022-03-28 08:46:48 +02:00
mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
2022-06-14 18:11:48 +02:00
net: mpls: Fix notifications when deleting a device
2021-12-08 09:01:12 +01:00
net/ncsi: check for error return from call to nla_put_u32
2022-01-05 12:37:45 +01:00
netfilter: nf_tables: memleak flow rule from commit path
2022-06-14 18:11:57 +02:00
netlabel: fix out-of-bounds memory accesses
2022-04-15 14:18:35 +02:00
netlink: do not reset transport header in netlink_recvmsg()
2022-05-18 09:47:25 +02:00
netrom: Decrease sock refcount when sock timers expire
2021-07-28 13:30:56 +02:00
NFC: NULL out the dev->rfkill to prevent UAF
2022-06-14 18:11:33 +02:00
net: openvswitch: fix leak of nested actions
2022-06-22 14:11:24 +02:00
net/packet: fix packet_sock xmit return value checking
2022-04-27 13:50:47 +02:00
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
net: qrtr: fix another OOB Read in qrtr_endpoint_post
2021-09-03 10:08:12 +02:00
rds: memory leak in __rds_conn_create()
2021-12-22 09:29:37 +01:00
rxrpc: Fix decision on when to generate an IDLE ACK
2022-06-14 18:11:38 +02:00
net/sched: act_police: more accurate MTU policing
2022-06-22 14:11:24 +02:00
sctp: read sk->sk_bound_dev_if once in sctp_rcv()
2022-06-14 18:11:37 +02:00
net/smc: postpone sk_refcnt increment in connect()
2022-06-14 18:11:39 +02:00
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-17 09:48:48 +01:00
SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
2022-06-14 18:11:58 +02:00
net: switchdev: do not propagate bridge updates across bridges
2021-10-27 09:54:24 +02:00
tipc: check attribute length for bearer name
2022-06-14 18:11:56 +02:00
tls: Skip tls_append_frag on zero copy size
2022-05-09 09:03:26 +02:00
af_unix: Fix a data-race in unix_dgram_peer_wake_me().
2022-06-14 18:11:57 +02:00
vsock: remove vsock from connected table when connect is interrupted by a signal
2022-02-23 11:59:57 +01:00
nl80211: show SSID for P2P_GO interfaces
2022-06-14 18:11:32 +02:00
net/x25: Fix null-ptr-deref caused by x25_disconnect
2022-04-15 14:18:21 +02:00
Revert "xsk: Do not sleep in poll() when need_wakeup set"
2021-12-22 09:29:40 +01:00
xfrm: fix tunnel model fragmentation behavior
2022-04-15 14:17:56 +02:00
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
2021-09-03 10:08:16 +02:00
2e1591c27b