Sebastian Andrzej Siewior
bf7a4fd336
xfrm: Linearize the skb after offloading if needed. ...
[ Upstream commit f015b900bc3285322029b4a7d132d6aeb0e51857 ]
With offloading enabled, esp_xmit() gets invoked very late, from within
validate_xmit_xfrm() which is after validate_xmit_skb() validates and
linearizes the skb if the underlying device does not support fragments.
esp_output_tail() may add a fragment to the skb while adding the auth
tag/ IV. Devices without the proper support will then send skb->data
points to with the correct length so the packet will have garbage at the
end. A pcap sniffer will claim that the proper data has been sent since
it parses the skb properly.
It is not affected with INET_ESP_OFFLOAD disabled.
Linearize the skb after offloading if the sending hardware requires it.
It was tested on v4, v6 has been adopted.
Fixes: 7785bba299
2023-06-28 10:18:38 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
tcp: deny tcp_disconnect() when threads are waiting
2023-06-09 10:28:53 +02:00
ipv4: Invalidate neighbour for broadcast address upon address addition
2022-04-15 14:18:33 +02:00
cipso: Fix data-races around sysctl.
2022-07-21 20:59:20 +02:00
net: return correct error code
2021-12-08 09:01:09 +01:00
esp: limit skb_page_frag_refill use to a single page
2022-07-12 16:30:45 +02:00
xfrm: Linearize the skb after offloading if needed.
2023-06-28 10:18:38 +02:00
ipv4: Fix incorrect table ID in IOCTL path
2023-03-22 13:28:06 +01:00
ipv6: fix memory leak in fib6_rule_suppress
2021-12-08 09:01:13 +01:00
ipv4: Fix incorrect route flushing when source address is deleted
2023-02-22 12:50:38 +01:00
ipv4: Fix a data-race around sysctl_fib_sync_mem.
2022-07-21 20:59:21 +02:00
icmp: guard against too small mtu
2023-04-20 12:07:33 +02:00
igmp: Fix data-races around sysctl_igmp_qrv.
2022-08-03 11:59:39 +02:00
tcp: deny tcp_disconnect() when threads are waiting
2023-06-09 10:28:53 +02:00
inet_diag: fix kernel-infoleak for UDP sockets
2021-12-22 09:29:36 +01:00
inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
2022-01-27 09:19:54 +01:00
inet: fix fast path in __inet_hash_connect()
2023-03-11 16:43:55 +01:00
tcp: avoid the lookup process failing to get sk in ehash table
2023-02-06 07:52:40 +01:00
inetpeer: Fix data-races around sysctl.
2022-07-21 20:59:20 +02:00
inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
2022-01-27 09:19:54 +01:00
ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
2023-05-30 12:44:05 +01:00
tcp/udp: Make early_demux back namespacified.
2022-11-10 17:57:55 +01:00
ipv4: Fix potential uninit variable access bug in __ip_make_skb()
2023-05-17 11:35:45 +02:00
ipv{4,6}/raw: fix output xfrm lookup wrt protocol
2023-06-05 08:17:33 +02:00
net: tunnels: annotate lockless accesses to dev->needed_headroom
2023-03-22 13:28:05 +01:00
ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
2022-02-16 12:52:51 +01:00
tcp: configurable source port perturb table size
2022-12-08 11:23:00 +01:00
ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
2023-02-06 07:52:45 +01:00
nh: fix scope used to find saddr when adding non gw nh
2022-11-03 23:56:56 +09:00
ping: fix address binding wrt vrf
2022-05-18 09:47:28 +02:00
ipv{4,6}/raw: fix output xfrm lookup wrt protocol
2023-06-05 08:17:33 +02:00
ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
2022-07-29 17:14:10 +02:00
tcp: Fix data-races around sysctl knobs related to SYN option.
2022-07-29 17:14:14 +02:00
tcp/udp: Make early_demux back namespacified.
2022-11-10 17:57:55 +01:00
tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
2023-06-09 10:28:53 +02:00
bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
2023-01-18 11:41:08 +01:00
tcp: cdg: allow tcp_cdg_release() to be called multiple times
2022-11-25 17:42:21 +01:00
tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows
2021-12-01 09:23:33 +01:00
tcp: Fix data-races around sysctl_tcp_fastopen.
2022-07-29 17:14:13 +02:00
tcp: fix indefinite deferral of RTO with SACK reneging
2022-11-03 23:56:55 +09:00
dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
2022-12-08 11:22:59 +01:00
tcp: Fix a data-race around sysctl_tcp_nometrics_save.
2022-08-03 11:59:38 +02:00
tcp: tcp_check_req() can be called from process context
2023-03-11 16:44:12 +01:00
tcp: tcp_make_synack() can be called from process context
2023-03-22 13:28:04 +01:00
tcp: ensure to use the most recently sent skb when filling the rate sample
2022-05-09 09:03:24 +02:00
tcp: Fix data-races around sysctl_tcp_recovery.
2022-07-29 17:14:15 +02:00
tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
2022-07-29 17:14:15 +02:00
tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
2023-04-26 11:24:05 +02:00
net/tunnel: wait until all sk_user_data reader finish before releasing the sock
2023-01-18 11:41:14 +01:00
udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
2023-05-30 12:44:09 +01:00
net: xfrm: unexport __init-annotated xfrm4_protocol_init()
2022-06-14 18:11:58 +02:00
bf7a4fd336