2016-03-17 | Steffen Klassert | xfrm: Reset encapsulation field of the skb before transformation Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2016-03-17 | Steffen Klassert | flowcache: Avoid OOM condition under preasure Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-11-03 | Dan Streetman | xfrm: dst_entries_init() per-net dst_ops Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-10-23 | Steffen Klassert | xfrm: Increment statistic counter on inner mode error Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-10-23 | Steffen Klassert | xfrm4: Reload skb header pointers after calling pskb_may_pull. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-10-23 | Steffen Klassert | xfrm4: Fix header checks in _decode_session4. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-10-23 | Sowmini Varadhan | xfrm: Fix unaligned access to stats in copy_to_user_state() Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-10-19 | Steffen Klassert | xfrm: Fix pmtu discovery for local generated packets. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-09-29 | Michael Rossberg | xfrm: Fix state threshold configuration from userspace Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-09-29 | Steffen Klassert | xfrm: Let the flowcache handle its size by default. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-09-14 | Mathias Krause | xfrm6: Fix ICMPv6 and MH header checks in _decode_session6 Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-09-04 | Herbert Xu | ipv6: Fix IPsec pre-encap fragmentation check Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-08-12 | Alexander Duyck | net: Document xfrm4_gc_thresh and xfrm6_gc_thresh Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-08-11 | David Ahern | xfrm: Add oif to dst lookups Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-08-11 | Andrzej Hajda | net/xfrm: use kmemdup rather than duplicating its implementation Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-08-11 | Thomas Egerer | xfrm6: Fix IPv6 ECN decapsulation Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-28 | Alexander Duyck | ip_vti/ip6_vti: Preserve skb->mark after rcv_cb call Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-28 | Alexander Duyck | xfrm: Override skb->mark with tunnel->parm.i_key in... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-28 | Alexander Duyck | ip_vti/ip6_vti: Do not touch skb->mark on xmit Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-21 | Herbert Xu | xfrm: Always zero high-order sequence number bits Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-18 | Li RongQing | xfrm: optimise to search the inexact policy list Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-13 | Herbert Xu | esp6: Use high-order sequence number bits for IV generation Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-13 | Herbert Xu | esp4: Use high-order sequence number bits for IV generation Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-05 | Li RongQing | xfrm: move the checking for old xfrm_policy hold_queue... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-05-05 | Li RongQing | xfrm: remove the unnecessary checking before call xfrm_pol_hold Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-29 | Li RongQing | xfrm: fix a race in xfrm_state_lookup_byspi Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-24 | Li RongQing | xfrm: slightly optimise xfrm_input Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-23 | Li RongQing | xfrm: fix the return code when xfrm_*_register_afinfo... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-23 | Li RongQing | xfrm: optimise the use of walk list header in xfrm_policy... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-23 | Li RongQing | xfrm: remove the xfrm_queue_purge definition Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-07 | Yao Xiwei | vti6: fix uninit when using x-netns Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-04-07 | Alexey Dobriyan | xfrm: fix xfrm_input/xfrm_tunnel_check oops Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-03-03 | Fan Du | xfrm: Do not parse 32bits compiled xfrm netlink msg... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-02-12 | huaibin Wang | xfrm: release dst_orig in case of error in xfrm_lookup() Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-02-09 | Steffen Klassert | xfrm: Fix local error reporting crash with interfamily... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2015-02-06 | Hajime Tazaki | xfrm6: Fix a offset value for network header in _decode_session6 Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-12-08 | Steffen Klassert | xfrm6: Fix the nexthdr offset in _decode_session6. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-12-08 | Steffen Klassert | xfrm6: Fix transport header offset in _decode_session6. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-11-20 | Steffen Klassert | vti6: Add a lookup method for tunnels with wildcard... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-11-13 | Herbert Xu | xfrm: Use __xfrm_policy_link in xfrm_policy_insert Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-11-13 | Herbert Xu | xfrm: Do not hash socket policies Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-11-03 | dingzhi | xfrm: add XFRMA_REPLAY_VAL attribute to SA messages Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-10-27 | Fabian Frederick | xfrm: fix set but not used warning in xfrm_policy_queue_proc... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-09-18 | Herbert Xu | ipsec: Remove obsolete MAX_AH_AUTH_LEN Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-09-16 | Steffen Klassert | xfrm: Generate queueing routes only from route lookup... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-09-16 | Steffen Klassert | xfrm: Generate blackhole routes only from route lookup... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-09-02 | Christophe Gouault | xfrm: configure policy hash table thresholds by netlink Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-09-02 | Christophe Gouault | xfrm: hash prefixed policies based on preflen thresholds Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-08-29 | Ying Xue | xfrm: remove useless hash_resize_mutex locks Cc: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-06-30 | Christoph Paasch | xfrm4: Remove duplicate semicolon Cc: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-06-30 | Tobias Brunner | xfrm: Fix installation of AH IPsec SAs Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-06-26 | Mathias Krause | vti: Simplify error handling in module init and exit Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-06-26 | Mathias Krause | vti6: Simplify error handling in module init and exit Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-06-26 | Steffen Klassert | xfrm: Fix refcount imbalance in xfrm_lookup Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-05-13 | Fabian Frederick | net/xfrm/xfrm_output.c: move EXPORT_SYMBOL Cc: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-05-12 | Steffen Klassert | vti: Use the tunnel mark for lookup in the error handlers. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-05-12 | Mathias Krause | vti6: Don't unregister pernet ops twice on init errors Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-05-06 | Steffen Klassert | xfrm6: Properly handle unsupported protocols Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-04-29 | Steffen Klassert | xfrm4: Properly handle unsupported protocols Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-04-23 | Tetsuo Handa | xfrm: Remove useless xfrm_audit struct. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-04-22 | Tetsuo Handa | xfrm: Remove useless secid field from xfrm_audit. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-04-16 | Steffen Klassert | vti4: Don't count header length twice. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-04-07 | Steffen Klassert | xfrm: Fix crash with ipv6 IPsec tunnel and NAT. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Enable namespace changing Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Check the tunnel endpoints of the xfrm state... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Support inter address family tunneling. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | xfrm6: Remove xfrm_tunnel_notifier Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Update the ipv6 side to use its own receive hook. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Remove caching of flow informations. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | vti6: Remove dst_entry caching Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | ipcomp6: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | ah6: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | esp6: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | xfrm6: Add IPsec protocol multiplexer Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-14 | Steffen Klassert | xfrm: Introduce xfrm_input_afinfo to access the the... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-10 | Nikolay Aleksandrov | selinux: add gfp argument to security_xfrm_policy_alloc... CC: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-10 | Nikolay Aleksandrov | net: af_key: fix sleeping under rcu CC: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-03-07 | Nicolas Dichtel | xfrm: rename struct xfrm_filter Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-26 | Steffen Klassert | xfrm: Fix unlink race when policies are deleted. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | vti4: Enable namespace changing Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | vti4: Check the tunnel endpoints of the xfrm state... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | vti4: Support inter address family tunneling. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | vti4: Use the on xfrm_lookup returned dst_entry directly Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | xfrm4: Remove xfrm_tunnel_notifier Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | vti: Update the ipv4 side to use it's own receive hook. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | ip_tunnel: Make vti work with i_key set Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | xfrm: Add xfrm_tunnel_skb_cb to the skb common buffer Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | ipcomp4: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | ah4: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | esp4: Use the IPsec protocol multiplexer API Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-25 | Steffen Klassert | xfrm4: Add IPsec protocol multiplexer Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-21 | Steffen Klassert | xfrm: Cleanup error handling of xfrm_state_clone Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-21 | Nicolas Dichtel | pfkey: fix SADB_X_EXT_FILTER length check Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-20 | Steffen Klassert | xfrm: Clone states properly on migration Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-20 | Steffen Klassert | xfrm: Take xfrm_state_lock in xfrm_migrate_state_find Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-20 | Steffen Klassert | xfrm: Fix NULL pointer dereference on sub policy usage Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-20 | Steffen Klassert | ip6_vti: Fix build when NET_IP_TUNNEL is not set. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-19 | Steffen Klassert | xfrm: Remove caching of xfrm_policy_sk_bundles Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-17 | Nicolas Dichtel | ipsec: add support of limited SA dump Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
2014-02-13 | Horia Geanta | xfrm: avoid creating temporary SA when there are no... Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> |
commit | commitdiff | tree |
next |