Sebastian Andrzej Siewior
bf7a4fd336
xfrm: Linearize the skb after offloading if needed. ...
[ Upstream commit f015b900bc3285322029b4a7d132d6aeb0e51857 ]
With offloading enabled, esp_xmit() gets invoked very late, from within
validate_xmit_xfrm() which is after validate_xmit_skb() validates and
linearizes the skb if the underlying device does not support fragments.
esp_output_tail() may add a fragment to the skb while adding the auth
tag/ IV. Devices without the proper support will then send skb->data
points to with the correct length so the packet will have garbage at the
end. A pcap sniffer will claim that the proper data has been sent since
it parses the skb properly.
It is not affected with INET_ESP_OFFLOAD disabled.
Linearize the skb after offloading if the sending hardware requires it.
It was tested on v4, v6 has been adopted.
Fixes: 7785bba299
2023-06-28 10:18:38 +02:00
ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
2023-03-17 08:32:50 +01:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
ipv6: take care of disable_policy when restoring routes
2022-07-07 17:36:47 +02:00
ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
2022-11-25 17:42:05 +01:00
dccp: Call inet6_destroy_sock() via sk->sk_destruct().
2023-04-26 11:24:05 +02:00
ipv6: Fix datagram socket connection with DSCP.
2023-02-22 12:50:41 +01:00
esp: limit skb_page_frag_refill use to a single page
2022-07-12 16:30:45 +02:00
xfrm: Linearize the skb after offloading if needed.
2023-06-28 10:18:38 +02:00
ipv6: Fix out-of-bounds access in ipv6_find_tlv()
2023-05-30 12:44:10 +01:00
secure_seq: use the 64 bits of the siphash for port offset calculation
2022-06-06 08:33:49 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
erspan: get the proto with the md version for collect_md
2023-05-30 12:44:05 +01:00
tcp/udp: Make early_demux back namespacified.
2022-11-10 17:57:55 +01:00
ipv6: Fix an uninit variable access bug in __ip6_make_skb()
2023-04-20 12:07:33 +02:00
net: tunnels: annotate lockless accesses to dev->needed_headroom
2023-03-22 13:28:05 +01:00
ipv6: make mc_forwarding atomic
2022-04-15 14:18:32 +02:00
udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).
2023-04-26 11:24:05 +02:00
ping6: Fix send to link-local addresses with VRF.
2023-06-21 15:44:11 +02:00
ipv{4,6}/raw: fix output xfrm lookup wrt protocol
2023-06-05 08:17:33 +02:00
ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
2023-03-11 16:44:11 +01:00
ipv6: sr: fix out-of-bounds read when setting HMAC data.
2022-09-15 12:04:55 +02:00
net: ipv6: unexport __init-annotated seg6_hmac_net_init()
2022-07-07 17:36:49 +02:00
seg6: fix skb checksum evaluation in SRH encapsulation/insertion
2022-07-21 20:59:23 +02:00
seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
2022-07-21 20:59:23 +02:00
sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
2023-05-17 11:35:58 +02:00
tcp: Fix data-races around sysctl_tcp_syncookies.
2022-07-29 17:14:13 +02:00
inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
2023-04-26 11:24:05 +02:00
inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
2023-04-26 11:24:05 +02:00
tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
2023-04-26 11:24:05 +02:00
udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
2023-05-30 12:44:09 +01:00
xfrm: fix tunnel model fragmentation behavior
2022-04-15 14:17:56 +02:00
xfrm: Fix ignored return value in xfrm6_init()
2022-12-08 11:22:58 +01:00
bf7a4fd336