aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_state.c
AgeCommit message (Expand)AuthorFilesLines
8 daysMerge tag 'ipsec-2026-06-22' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-8/+15
2026-06-17xfrm: Fix xfrm state cache insertion raceHerbert Xu1-7/+14
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-53/+91
2026-06-12xfrm: use compat translator only for u64 alignment mismatchSanman Pradhan1-1/+1
2026-06-04xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migrationAntony Antony1-7/+22
2026-06-04xfrm: move encap and xuo into struct xfrm_migrateAntony Antony1-13/+7
2026-06-04xfrm: add error messages to state migrationAntony Antony1-2/+7
2026-06-04xfrm: add state synchronization after migrationAntony Antony1-7/+4
2026-06-04xfrm: check family before comparing addresses in migrateAntony Antony1-3/+4
2026-06-04xfrm: split xfrm_state_migrate into create and install functionsAntony Antony1-20/+53
2026-06-04xfrm: rename reqid in xfrm_migrateAntony Antony1-3/+3
2026-06-04xfrm: fix NAT-related field inheritance in SA migrationAntony Antony1-1/+2
2026-06-04xfrm: allow migration from UDP encapsulated to non-encapsulated ESPAntony Antony1-8/+2
2026-06-04xfrm: add extack to xfrm_init_stateAntony Antony1-3/+3
2026-06-04xfrm: remove redundant assignmentsAntony Antony1-2/+0
2026-05-14xfrm: Check for underflow in xfrm_state_mtuDavid Ahern1-3/+16
2026-05-07xfrm: route MIGRATE notifications to caller's netnsMaoyi Xie1-2/+2
2026-04-29xfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteMichal Kosiorek1-6/+6
2026-03-12xfrm: state: silence sparse warnings during netns exitSabrina Dubroca1-8/+10
2026-03-12xfrm: remove rcu/state_hold from xfrm_state_lookup_spi_protoSabrina Dubroca1-9/+2
2026-03-12xfrm: state: add xfrm_state_deref_prot to state_by* walk under lockSabrina Dubroca1-11/+11
2026-03-12xfrm: state: fix sparse warnings around XFRM_STATE_INSERTSabrina Dubroca1-11/+19
2026-03-12xfrm: state: fix sparse warnings in xfrm_state_initSabrina Dubroca1-12/+20
2026-03-12xfrm: state: fix sparse warnings on xfrm_state_hold_rcuSabrina Dubroca1-1/+1
2026-02-25xfrm: call xdo_dev_state_delete during state updateSabrina Dubroca1-0/+1
2025-12-15xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is setAntony Antony1-0/+1
2025-10-21xfrm: check all hash buckets for leftover states during netns deletionSabrina Dubroca1-4/+8
2025-10-21xfrm: call xfrm_dev_state_delete when xfrm_state_migrate fails to add the stateSabrina Dubroca1-1/+4
2025-10-21xfrm: make state as DEAD before final put when migrate failsSabrina Dubroca1-0/+2
2025-10-21xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were...Sabrina Dubroca1-1/+2
2025-10-21xfrm: drop SA reference in xfrm_state_update if dir doesn't matchSabrina Dubroca1-2/+6
2025-09-01xfrm: xfrm_alloc_spi shouldn't use 0 as SPISabrina Dubroca1-0/+3
2025-08-06xfrm: flush all states in xfrm_state_finiSabrina Dubroca1-1/+1
2025-07-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-43/+26
2025-07-24Merge tag 'ipsec-2025-07-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni1-43/+26
2025-07-08Revert "xfrm: destroy xfrm_state synchronously on net exit path"Sabrina Dubroca1-14/+9
2025-07-08xfrm: delete x->tunnel as we delete xSabrina Dubroca1-11/+8
2025-07-04xfrm: Skip redundant statistics update for crypto offloadJianbo Liu1-1/+6
2025-07-02xfrm: Duplicate SPI HandlingAakash Kumar S1-29/+43
2025-06-12xfrm: always initialize offload pathLeon Romanovsky1-4/+2
2025-06-08treewide, timers: Rename from_timer() to timer_container_of()Ingo Molnar1-1/+1
2025-06-03xfrm: state: use a consistent pcpu_id in xfrm_state_findSabrina Dubroca1-13/+6
2025-06-03xfrm: state: initialize state_ptrs earlier in xfrm_state_findSabrina Dubroca1-2/+2
2025-05-26Merge tag 'ipsec-next-2025-05-23' of git://git.kernel.org/pub/scm/linux/kerne...Paolo Abeni1-19/+27
2025-05-20xfrm: use kfree_sensitive() for SA secret zeroizationZilin Guan1-3/+3
2025-05-14xfrm: Sanitize marks before insertPaul Chaignon1-0/+3
2025-04-17xfrm: Refactor migration setup during the cloning processChiachang Wang1-8/+9
2025-04-17xfrm: Migrate offload configurationChiachang Wang1-1/+8
2025-04-16xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free}Cosmin Ratiu1-6/+8
2025-04-16xfrm: Use xdo.dev instead of xdo.real_devCosmin Ratiu1-2/+0
2025-04-14espintcp: remove encap socket caching to avoid reference leakSabrina Dubroca1-3/+0
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner1-1/+1
2025-03-26Merge tag 'net-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds1-30/+24
2025-03-12xfrm: state: make xfrm_state_lookup_byaddr locklessFlorian Westphal1-2/+2
2025-02-21xfrm: simplify SA initialization routineLeon Romanovsky1-12/+10
2025-02-21xfrm: delay initialization of offload path till its actually requestedLeon Romanovsky1-18/+14
2025-02-18xfrm: Switch to use hrtimer_setup()Nam Cao1-2/+2
2025-01-27Merge tag 'ipsec-2025-01-27' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-22/+71
2025-01-24xfrm: Don't disable preemption while looking up cache state.Sebastian Sewior1-3/+1
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps1-0/+12
2024-12-05xfrm: add mode_cbs module functionalityChristian Hopps1-0/+72
2024-12-05xfrm: state: fix out-of-bounds read during lookupFlorian Westphal1-19/+70
2024-11-15xfrm: Fix acquire state insertion.Steffen Klassert1-0/+1
2024-10-29xfrm: Add an inbound percpu state cache.Steffen Klassert1-0/+57
2024-10-29xfrm: Cache used outbound xfrm states at the policy.Steffen Klassert1-0/+55
2024-10-29xfrm: Add support for per cpu xfrm state handling.Steffen Klassert1-11/+47
2024-07-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+61
2024-07-08xfrm: fix netdev reference count imbalanceJianbo Liu1-2/+1
2024-07-01xfrm: Export symbol xfrm_dev_state_delete.Steffen Klassert1-0/+1
2024-06-26xfrm: support sending NAT keepalives in ESP in UDP statesEyal Birger1-0/+17
2024-06-25xfrm: Fix unregister netdevice hang on hardware offload.Steffen Klassert1-2/+59
2024-05-01xfrm: Add Direction to the SA in or outAntony Antony1-0/+8
2024-02-05xfrm: get global statistics from the offloaded deviceLeon Romanovsky1-0/+13
2024-02-05xfrm: generalize xdo_dev_state_update_curlft to allow statistics updateLeon Romanovsky1-2/+2
2023-08-01xfrm: don't skip free of empty state in acquire policyLeon Romanovsky1-6/+2
2023-03-22Merge tag 'ipsec-libreswan-mlx5' of https://git.kernel.org/pub/scm/linux/kern...Jakub Kicinski1-0/+1
2023-03-20xfrm: add new device offload acquire flagRaed Salem1-0/+1
2023-03-16Merge tag 'ipsec-2023-03-15' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-5/+0
2023-02-24xfrm: Allow transport-mode states with AF_UNSPEC selectorHerbert Xu1-5/+0
2023-02-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-9/+9
2023-01-27xfrm: annotate data-race around use_timeEric Dumazet1-5/+5
2023-01-27xfrm: consistently use time64_t in xfrm_timer_handler()Eric Dumazet1-4/+4
2023-01-26xfrm: extend add state callback to set failure reasonLeon Romanovsky1-1/+1
2022-12-13Merge tag 'net-next-6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-22/+188
2022-12-05xfrm: add support to HW update soft and hard limitsLeon Romanovsky1-0/+4
2022-12-05xfrm: speed-up lookup of HW policiesLeon Romanovsky1-15/+51
2022-12-05xfrm: add TX datapath support for IPsec packet offload modeLeon Romanovsky1-2/+117
2022-11-29Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...Jakub Kicinski1-5/+16
2022-11-25xfrm: add extack to xfrm_alloc_userspiSabrina Dubroca1-5/+16
2022-11-18treewide: use get_random_u32_inclusive() when possibleJason A. Donenfeld1-1/+1
2022-11-18treewide: use get_random_u32_below() instead of deprecated functionJason A. Donenfeld1-1/+1
2022-10-11treewide: use prandom_u32_max() when possible, part 1Jason A. Donenfeld1-1/+1
2022-10-03Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-9/+21
2022-09-29xfrm: pass extack down to xfrm_type ->init_stateSabrina Dubroca1-1/+1
2022-09-22xfrm: add extack support to xfrm_init_replaySabrina Dubroca1-1/+1
2022-09-22xfrm: add extack to __xfrm_init_stateSabrina Dubroca1-7/+19
2022-08-24Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+1
2022-08-03xfrm: clone missing x->lastused in xfrm_do_migrateAntony Antony1-0/+1
2022-07-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-4/+2
2022-07-15ip: Fix data-races around sysctl_ip_no_pmtu_disc.Kuniyuki Iwashima1-1/+1
2022-06-24xfrm: change the type of xfrm_register_km and xfrm_unregister_kmZhengchao Shao1-4/+2
2022-05-06xfrm: rename xfrm_state_offload struct to allow reuseLeon Romanovsky1-2/+2
2022-01-27Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"Jiri Bohac1-12/+2
2022-01-26xfrm: Fix xfrm migrate issues when address family changesYan Yan1-3/+5
2022-01-26xfrm: Check if_id in xfrm_migrateYan Yan1-1/+6
2022-01-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+22
2021-12-29net: Don't include filter.h from net/sock.hJakub Kicinski1-0/+1
2021-12-23xfrm: rate limit SA mapping change message to user spaceAntony Antony1-1/+22
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+12
2021-06-21xfrm: replay: avoid xfrm replay notify indirectionFlorian Westphal1-1/+1
2021-05-14xfrm: add state hashtable keyed by seqSabrina Dubroca1-13/+52
2021-04-19xfrm: xfrm_state_mtu should return at least 1280 for ipv6Sabrina Dubroca1-2/+12
2021-03-22net: xfrm: Use sequence counter with associated spinlockAhmed S. Darwish1-1/+2
2021-03-22net: xfrm: Localize sequence counter per network namespaceAhmed S. Darwish1-5/+5
2020-12-16Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+4
2020-11-23lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore1-2/+4
2020-11-10net: xfrm: fix memory leak in xfrm_user_policy()Yu Kuai1-1/+3
2020-11-04Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...Jakub Kicinski1-3/+5
2020-10-23net: xfrm: fix a race condition during allocing spizhuoliang zhang1-3/+5
2020-10-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-5/+37
2020-09-25xfrm: Use correct address family in xfrm_state_findHerbert Xu1-4/+7
2020-09-24xfrm/compat: Translate 32-bit user_policy from sockptrDmitry Safonov1-3/+14
2020-09-24xfrm: Provide API to register translator moduleDmitry Safonov1-0/+60
2020-09-07xfrm: clone whole liftime_cur structure in xfrm_do_migrateAntony Antony1-1/+1
2020-09-07xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrateAntony Antony1-0/+28
2020-09-07xfrm: clone XFRMA_SET_MARK in xfrm_do_migrateAntony Antony1-0/+1
2020-07-24net/xfrm: switch xfrm_user_policy to sockptr_tChristoph Hellwig1-3/+3
2020-02-19xfrm: Use kmem_cache_zalloc() instead of kmem_cache_alloc() with flag GFP_ZERO.Huang Zijiang1-1/+1
2019-12-09xfrm: add espintcp (RFC 8229)Sabrina Dubroca1-0/+3
2019-11-07xfrm: Fix memleak on xfrm state destroySteffen Klassert1-0/+2
2019-07-01xfrm: remove get_mtu indirection from xfrm_typeFlorian Westphal1-5/+29
2019-06-06xfrm: remove type and offload_type map from xfrm_state_afinfoFlorian Westphal1-52/+127
2019-06-06xfrm: remove state and template sort indirections from xfrm_state_afinfoFlorian Westphal1-27/+105
2019-06-05xfrm: remove init_flags indirection from xfrm_state_afinfoFlorian Westphal1-14/+3
2019-06-05xfrm: remove init_temprop indirection from xfrm_state_afinfoFlorian Westphal1-7/+20
2019-06-05xfrm: remove init_tempsel indirection from xfrm_state_afinfoFlorian Westphal1-7/+49
2019-05-21treewide: Add SPDX license identifier for missed filesThomas Gleixner1-0/+1
2019-05-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-112/+68
2019-05-06Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-12/+18
2019-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2019-04-23xfrm: remove unneeded export_symbolsFlorian Westphal1-3/+2
2019-04-08xfrm: store xfrm_mode directly, not its addressFlorian Westphal1-8/+8
2019-04-08xfrm: make xfrm modes builtinFlorian Westphal1-94/+58
2019-04-08xfrm: remove afinfo pointer from xfrm_modeFlorian Westphal1-2/+2
2019-04-08xfrm: place af number into xfrm_mode structFlorian Westphal1-13/+6
2019-03-26xfrm: clean up xfrm protocol checksCong Wang1-1/+1
2019-03-22xfrm: Replace hrtimer tasklet with softirq hrtimerThomas Gleixner1-12/+18
2019-02-05xfrm: destroy xfrm_state synchronously on net exit pathCong Wang1-11/+19
2018-12-18Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+8
2018-11-23xfrm_user: fix freeing of xfrm states on acquireMathias Krause1-1/+7
2018-11-06xfrm: Fix bucket count reported to userspaceBenjamin Poirier1-1/+1
2018-11-01compat: Cleanup in_compat_syscall() callersDmitry Safonov1-2/+0
2018-07-20xfrm: Allow xfrmi if_id to be updated by UPDSANathan Harold1-2/+6
2018-07-20xfrm: Remove xfrmi interface ID from flowiBenedict Wong1-2/+1
2018-07-11xfrm: use time64_t for in-kernel timestampsArnd Bergmann1-5/+5
2018-07-01xfrm: Allow Set Mark to be Updated Using UPDSANathan Harold1-0/+9
2018-06-25xfrm: policy: remove pcpu policy cacheFlorian Westphal1-3/+2
2018-06-23xfrm: Add a new lookup key to match xfrm interfaces.Steffen Klassert1-5/+14
2018-05-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+6
2018-05-04xfrm: use a dedicated slab cache for struct xfrm_stateMathias Krause1-2/+7
2018-04-16xfrm: Fix warning in xfrm6_tunnel_net_exit.Steffen Klassert1-0/+6
2018-02-02xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systemsSteffen Klassert1-0/+5
2018-01-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+8
2018-01-23xfrm: fix boolean assignment in xfrm_get_type_offloadGustavo A. R. Silva1-1/+1
2018-01-18xfrm: Add SA to hardware at the end of xfrm_state_construct()Yossi Kuperman1-3/+7
2018-01-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+9
2017-12-31xfrm: fix rcu usage in xfrm_get_type_offloadSabrina Dubroca1-1/+2
2017-12-30xfrm: Forbid state updates from changing encap typeHerbert Xu1-1/+7
2017-12-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2017-12-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+1
2017-12-08xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM)Antony Antony1-0/+1
2017-11-30net: xfrm: allow clearing socket xfrm policies.Lorenzo Colitti1-0/+7
2017-11-21treewide: setup_timer() -> timer_setup()Kees Cook1-5/+4
2017-10-26xfrm: Clear sk_dst_cache when applying per-socket policy.Jonathan Basseri1-0/+1
2017-09-28xfrm: don't call xfrm_policy_cache_flush under xfrm_state_lockArtem Savkov1-2/+2
2017-09-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+8
2017-08-02xfrm: fix null pointer dereference on state and tmpl sortKoichiro Den1-0/+8
2017-08-02xfrm: Auto-load xfrm offload modulesIlan Tayari1-4/+12
2017-07-18xfrm: add xdst pcpu cacheFlorian Westphal1-2/+3
2017-07-04net, xfrm: convert xfrm_state.refcnt from atomic_t to refcount_tReshetova, Elena1-2/+2
2017-06-23Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-15/+20
2017-06-07xfrm: add UDP encapsulation port in migrate messageAntony Antony1-2/+4
2017-06-07xfrm: extend MIGRATE with UDP encapsulation portAntony Antony1-5/+13
2017-05-19xfrm: fix state migration copy replay sequence numbersAntony Antony1-0/+2
2017-05-16xfrm: use memdup_userGeliang Tang1-8/+3
2017-04-14xfrm: Add an IPsec hardware offloading APISteffen Klassert1-0/+74
2017-04-14xfrm: Add a xfrm type offload.Steffen Klassert1-0/+73
2017-01-16xfrm: fix possible null deref in xfrm_init_tempstateFlorian Westphal1-2/+4
2017-01-10xfrm: state: simplify rcu_read_unlock handling in two spotsFlorian Westphal1-6/+7
2017-01-10xfrm: add and use xfrm_state_afinfo_get_rcuFlorian Westphal1-10/+15
2017-01-10xfrm: remove xfrm_state_put_afinfoFlorian Westphal1-18/+13
2017-01-10xfrm: avoid rcu sparse warningFlorian Westphal1-8/+8
2017-01-06xfrm: state: do not acquire lock in get_mtu helpersFlorian Westphal1-8/+5
2017-01-04xfrm: trivial typosAlexander Alemayhu1-1/+1
2016-12-25ktime: Cleanup ktime_set() usageThomas Gleixner1-1/+1
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-09-30xfrm: remove unused helperFlorian Westphal1-8/+0
2016-09-24Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-21xfrm: state lookup can be locklessFlorian Westphal1-2/+2