kernel/linux.git/net/ipv4/xfrm4_protocol.c, branch linux-4.16.y

xfrm: input: constify xfrm_input_afinfo

2017-02-09T09:22:17+00:00

Nothing writes to these structures (the module owner was not used). While at it, size xfrm_input_afinfo[] by the highest existing xfrm family (INET6), not AF_MAX. Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert

xfrm4: Remove duplicate semicolon

2014-06-30T05:49:47+00:00

3328715e6c1fc (xfrm4: Add IPsec protocol multiplexer) adds a duplicate semicolon after the return-statement. Although it has no negative impact, the second semicolon should be removed. Cc: Steffen Klassert Cc: Herbert Xu Signed-off-by: Christoph Paasch Signed-off-by: Steffen Klassert

xfrm4: Properly handle unsupported protocols

2014-04-29T06:41:12+00:00

We don't catch the case if an unsupported protocol is submitted to the xfrm4 protocol handlers, this can lead to NULL pointer dereferences. Fix this by adding the appropriate checks. Fixes: 3328715e ("xfrm4: Add IPsec protocol multiplexer") Signed-off-by: Steffen Klassert

xfrm: Introduce xfrm_input_afinfo to access the the callbacks properly

2014-03-14T06:28:07+00:00

IPv6 can be build as a module, so we need mechanism to access the address family dependent callback functions properly. Therefore we introduce xfrm_input_afinfo, similar to that what we have for the address family dependent part of policies and states. Signed-off-by: Steffen Klassert

xfrm: Add xfrm_tunnel_skb_cb to the skb common buffer

2014-02-25T06:04:17+00:00

IPsec vti_rcv needs to remind the tunnel pointer to check it later at the vti_rcv_cb callback. So add this pointer to the IPsec common buffer, initialize it and check it to avoid transport state matching of a tunneled packet. Signed-off-by: Steffen Klassert

xfrm4: Add IPsec protocol multiplexer

2014-02-25T06:04:16+00:00

This patch add an IPsec protocol multiplexer. With this it is possible to add alternative protocol handlers as needed for IPsec virtual tunnel interfaces. Signed-off-by: Steffen Klassert