Lorenzo Colitti
b8a72fd7c4
ANDROID: net: xfrm: make PF_KEY SHA256 use RFC-compliant truncation. ...
When using the PF_KEY interface, SHA-256 hashes are hardcoded to
use 96-bit truncation. This is a violation of RFC4868, which
specifies 128-bit truncation, but will not be fixed upstream due
to backwards compatibility concerns and because the PF_KEY
interface is deprecated in favour of netlink XFRM (which allows
the app to specify an arbitrary truncation length).
Change the hardcoded truncation length from 96 to 128 so that
PF_KEY apps such as racoon will work with standards-compliant VPN
servers.
Bug: 34114242
Bug: 120440497
Change-Id: Ie46bff4b6358f18117d0be241171d677d31d33f7
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
2019-05-03 10:39:57 -07:00
Pull request for inclusion in 4.19, take two
2018-08-17 17:27:58 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-08-15 15:04:25 -07:00
batman-adv: Increase version number to 2018.3
2018-09-14 17:59:20 +02:00
Bluetooth: SMP: fix crash in unpairing
2018-09-26 12:39:32 +03:00
net: bpfilter: use get_pid_task instead of pid_task
2018-10-17 22:03:40 -07:00
netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
2018-09-20 18:24:14 +02:00
Revert "neighbour: force neigh_invalidate when NUD_FAILED update is from admin"
2018-10-20 22:25:01 -07:00
inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
2018-10-02 15:52:12 -07:00
net: dsa: Drop GPIO includes
2018-08-27 15:24:33 -07:00
net: ipmr: fix unresolved entry dumps
2018-10-17 22:35:42 -07:00
net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
2018-10-20 15:43:14 -07:00
net/iucv: declare iucv_path_table_empty() as static
2018-09-05 22:32:22 -07:00
Revert "kcm: remove any offset before parsing messages"
2018-09-17 18:43:42 -07:00
l2tp: fix unused function warning
2018-08-13 20:45:49 -07:00
llc: set SOCK_RCU_FREE in llc_sap_add_socket()
2018-10-15 22:01:37 -07:00
mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
2018-10-01 09:13:48 +02:00
mpls: allow routes on ip6gre devices
2018-09-24 12:19:27 -07:00
net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
2018-08-22 21:39:08 -07:00
netfilter: xt_socket: check sk before checking for netns.
2018-09-28 14:47:41 +02:00
netlabel: check for IPV4MASK in addrinfo_get
2018-09-21 18:58:34 -07:00
NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
2018-09-18 19:55:01 -07:00
openvswitch: load NAT helper
2018-10-04 21:45:16 -07:00
net/packet: fix packet drop as of virtio gso
2018-10-04 22:23:15 -07:00
rds: RDS (tcp) hangs on sendto() to unresponding address
2018-10-10 22:19:52 -07:00
Here are quite a large number of fixes, notably:
2018-09-03 22:12:02 -07:00
rxrpc: Fix a missing rxrpc_put_peer() in the error_report handler
2018-10-15 23:13:42 -07:00
net: sched: Fix for duplicate class dump
2018-10-18 16:00:02 -07:00
sctp: not free the new asoc when sctp_wait_for_connect returns err
2018-10-17 22:12:46 -07:00
smc: generic netlink family should be __ro_after_init
2018-09-20 07:49:55 -07:00
NFS client updates for Linux 4.19
2018-08-23 16:03:58 -07:00
tipc: fix info leak from kernel tipc_event
2018-10-18 16:49:53 -07:00
tls: fix currently broken MSG_PEEK behavior
2018-09-17 08:03:09 -07:00
cfg80211: fix use-after-free in reg_process_hint()
2018-10-01 09:14:03 +02:00
xsk: do not call synchronize_net() under RCU read lock
2018-10-11 10:19:01 +02:00
ANDROID: net: xfrm: make PF_KEY SHA256 use RFC-compliant truncation.
2019-05-03 10:39:57 -07:00
net: socket: fix a missing-check bug
2018-10-18 16:43:06 -07:00
b8a72fd7c4