aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm
AgeCommit message (Expand)AuthorFilesLines
42 hoursxfrm: ipcomp: adjust transport header after decompressingHEADtestingmasterFernando Fernandez Mancera1-1/+1
2025-06-12xfrm: always initialize offload pathLeon Romanovsky3-5/+3
2025-06-03xfrm: state: use a consistent pcpu_id in xfrm_state_findSabrina Dubroca1-13/+6
2025-06-03xfrm: state: initialize state_ptrs earlier in xfrm_state_findSabrina Dubroca1-2/+2
2025-05-26Merge tag 'ipsec-next-2025-05-23' of git://git.kernel.org/pub/scm/linux/kerne...Paolo Abeni4-50/+95
2025-05-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-6/+10
2025-05-20xfrm: use kfree_sensitive() for SA secret zeroizationZilin Guan1-3/+3
2025-05-15xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46]Sebastian Andrzej Siewior1-10/+20
2025-05-15xfrm: prevent configuration of interface index when offload is usedLeon Romanovsky1-0/+5
2025-05-15xfrm: validate assignment of maximal possible SEQ numberLeon Romanovsky1-10/+42
2025-05-14xfrm: Sanitize marks before insertipsec-2025-05-21Paul Chaignon2-0/+6
2025-04-30xfrm: ipcomp: fix truesize computation on receiveSabrina Dubroca1-2/+1
2025-04-17xfrm: Refactor migration setup during the cloning processChiachang Wang1-8/+9
2025-04-17xfrm: Migrate offload configurationChiachang Wang3-6/+22
2025-04-16xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free}Cosmin Ratiu2-9/+9
2025-04-16xfrm: Remove unneeded device check from validate_xmit_xfrmCosmin Ratiu1-6/+1
2025-04-16xfrm: Use xdo.dev instead of xdo.real_devCosmin Ratiu2-4/+0
2025-04-14xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl().Kuniyuki Iwashima1-19/+15
2025-04-14espintcp: remove encap socket caching to avoid reference leakSabrina Dubroca1-3/+0
2025-04-14espintcp: fix skb leaksSabrina Dubroca1-1/+3
2025-04-11xfrm: Remove unnecessary strscpy_pad() size argumentsThorsten Blum1-5/+5
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner2-6/+6
2025-03-29Merge tag 'v6.15-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds2-225/+215
2025-03-26Merge tag 'net-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds6-53/+84
2025-03-25Merge tag 'timers-cleanups-2025-03-23' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds2-6/+4
2025-03-25Merge tag 'ipsec-next-2025-03-24' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski5-46/+76
2025-03-21xfrm: ipcomp: Use crypto_acomp interfaceHerbert Xu2-228/+215
2025-03-21xfrm: ipcomp: Call pskb_may_pull in ipcomp_inputHerbert Xu1-0/+3
2025-03-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-1/+42
2025-03-19xfrm: Remove unnecessary NULL check in xfrm_lookup_with_ifid()Dan Carpenter1-1/+1
2025-03-12xfrm: state: make xfrm_state_lookup_byaddr locklessFlorian Westphal1-2/+2
2025-02-21net: xfrm: Use link netns in newlink() of rtnl_link_opsXiao Liang1-4/+4
2025-02-21rtnetlink: Pack newlink() params into structXiao Liang1-3/+4
2025-02-21xfrm_output: Force software GSO only in tunnel modeipsec-2025-03-19Cosmin Ratiu1-1/+1
2025-02-21xfrm: fix tunnel mode TX datapath in packet offload modeAlexandre Cassen1-0/+41
2025-02-21xfrm: check for PMTU in tunnel mode for packet offloadLeon Romanovsky2-4/+12
2025-02-21xfrm: provide common xdo_dev_offload_ok callback implementationLeon Romanovsky1-0/+15
2025-02-21xfrm: rely on XFRM offloadLeon Romanovsky1-6/+4
2025-02-21xfrm: simplify SA initialization routineLeon Romanovsky2-13/+11
2025-02-21xfrm: delay initialization of offload path till its actually requestedLeon Romanovsky3-24/+23
2025-02-18xfrm: Switch to use hrtimer_setup()Nam Cao2-6/+4
2025-02-12xfrm: prevent high SEQ input in non-ESN modeLeon Romanovsky1-0/+12
2025-01-27Merge tag 'ipsec-2025-01-27' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski5-31/+83
2025-01-24xfrm: Don't disable preemption while looking up cache state.ipsec-2025-01-27Sebastian Sewior1-3/+1
2025-01-20xfrm: Fix the usage of skb->skSteffen Klassert3-5/+6
2025-01-13net: remove init_dummy_netdev()Jakub Kicinski1-3/+6
2025-01-07xfrm: Support ESN context update to hardware for TXJianbo Liu1-0/+1
2024-12-05xfrm: iptfs: add tracepoint functionalityChristian Hopps2-1/+288
2024-12-05xfrm: iptfs: handle reordering of received packetsChristian Hopps1-13/+484
2024-12-05xfrm: iptfs: add skb-fragment sharing codeChristian Hopps1-6/+290
2024-12-05xfrm: iptfs: add reusing received skb for the tunnel egress packetChristian Hopps1-15/+108
2024-12-05xfrm: iptfs: handle received fragmented inner packetsChristian Hopps1-19/+461
2024-12-05xfrm: iptfs: add basic receive packet (tunnel egress) handlingChristian Hopps1-0/+276
2024-12-05xfrm: iptfs: add fragmenting of larger than MTU user packetsChristian Hopps1-28/+315
2024-12-05xfrm: iptfs: share page fragments of inner packetsChristian Hopps1-8/+77
2024-12-05xfrm: iptfs: add user packet (tunnel ingress) handlingChristian Hopps1-3/+560
2024-12-05xfrm: iptfs: add new iptfs xfrm mode implChristian Hopps2-0/+217
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps6-2/+37
2024-12-05xfrm: add mode_cbs module functionalityChristian Hopps6-10/+116
2024-12-05xfrm: netlink: add config (netlink) optionsChristian Hopps2-2/+60
2024-12-05xfrm: config: add CONFIG_XFRM_IPTFSChristian Hopps1-0/+16
2024-12-05xfrm: state: fix out-of-bounds read during lookupFlorian Westphal1-19/+70
2024-11-25xfrm: replay: Fix the update of replay_esn->oseq_hi for GSOJianbo Liu1-4/+6
2024-11-18Merge tag 'ipsec-next-2024-11-15' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller5-27/+255
2024-11-15xfrm: Fix acquire state insertion.Steffen Klassert1-0/+1
2024-11-14xfrm: replace deprecated strncpy with strscpy_padDaniel Yang1-1/+1
2024-11-14xfrm: Add error handling when nla_put_u32() returns an errorEverest K.C1-1/+4
2024-11-11net: convert to nla_get_*_default()Johannes Berg1-5/+3
2024-11-06xfrm: Convert struct xfrm_dst_lookup_params -> tos to dscp_t.Guillaume Nault1-1/+1
2024-11-06xfrm: Convert xfrm_dst_lookup() to dscp_t.Guillaume Nault1-5/+4
2024-11-06xfrm: Convert xfrm_bundle_create() to dscp_t.Guillaume Nault1-3/+4
2024-11-06xfrm: Convert xfrm_get_tos() to dscp_t.Guillaume Nault1-3/+3
2024-10-29xfrm: Restrict percpu SA attribute to specific netlink message typesSteffen Klassert1-0/+14
2024-10-29xfrm: Add an inbound percpu state cache.Steffen Klassert2-1/+58
2024-10-29xfrm: Cache used outbound xfrm states at the policy.Steffen Klassert2-0/+67
2024-10-29xfrm: Add support for per cpu xfrm state handling.Steffen Klassert3-17/+103
2024-10-24Merge tag 'ipsec-2024-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni3-20/+54
2024-10-11xfrm: fix one more kernel-infoleak in algo dumpingipsec-2024-10-22Petr Vaganov1-1/+3
2024-10-07xfrm: validate new SA's prefixlen using SA family when sel.family is unsetSabrina Dubroca1-1/+5
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro1-1/+1
2024-09-24xfrm: policy: remove last remnants of pernet inexact listFlorian Westphal1-3/+0
2024-09-23xfrm: respect ip protocols rules criteria when performing dst lookupsEyal Birger1-0/+15
2024-09-23xfrm: extract dst lookup parameters into a structEyal Birger2-15/+31
2024-09-10Merge tag 'ipsec-next-2024-09-10' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski2-127/+101
2024-09-09xfrm: policy: Restore dir assignments in xfrm_hash_rebuild()Nathan Chancellor1-0/+2
2024-09-09xfrm: policy: fix null dereferenceFlorian Westphal1-2/+2
2024-09-09Revert "xfrm: add SA information to the offloaded packet"Steffen Klassert1-21/+0
2024-09-03netdev_features: convert NETIF_F_LLTX to dev->lltxAlexander Lobakin1-1/+1
2024-08-31xfrm: Unmask upper DSCP bits in xfrm_get_tos()Ido Schimmel1-1/+2
2024-08-28xfrm: minor update to sdb and xfrm_policy commentsFlorian Westphal1-1/+5
2024-08-28xfrm: policy: use recently added helper in more placesFlorian Westphal1-11/+2
2024-08-27xfrm: add SA information to the offloaded packetwangfe1-0/+21
2024-08-24xfrm: policy: remove remaining use of inexact listFlorian Westphal1-38/+0
2024-08-24xfrm: switch migrate to xfrm_policy_lookup_bytypeFlorian Westphal1-67/+39
2024-08-24xfrm: policy: don't iterate inexact policies twice at insert timeFlorian Westphal1-6/+53
2024-08-16xfrm: Remove documentation WARN_ON to limit return values for offloaded SAPatrisious Haddad1-5/+1
2024-07-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-13/+66
2024-07-14Merge tag 'ipsec-next-2024-07-13' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski8-8/+347
2024-07-14Merge tag 'ipsec-2024-07-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski4-13/+66
2024-07-12xfrm: Support crypto offload for inbound IPv4 UDP-encapsulated ESP packetMike Yu1-1/+2
2024-07-12xfrm: Allow UDP encapsulation in crypto offload control pathMike Yu1-3/+3
2024-07-12xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO pathMike Yu2-2/+5
2024-07-08xfrm: call xfrm_dev_policy_delete when kill policyipsec-2024-07-11Jianbo Liu2-4/+2
2024-07-08xfrm: fix netdev reference count imbalanceJianbo Liu1-2/+1
2024-07-01xfrm: Export symbol xfrm_dev_state_delete.Steffen Klassert1-0/+1
2024-06-26xfrm: support sending NAT keepalives in ESP in UDP statesEyal Birger6-3/+338
2024-06-25xfrm: Fix unregister netdevice hang on hardware offload.Steffen Klassert1-2/+59
2024-06-17xfrm: Log input direction mismatch error in one placeAntony Antony1-5/+0
2024-06-17xfrm: Fix input error path memory accessAntony Antony1-0/+3
2024-05-29net: fix __dst_negative_advice() raceEric Dumazet1-8/+3
2024-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-0/+10
2024-05-07rtnetlink: allow rtnl_fill_link_netnsid() to run under RCU protectionEric Dumazet1-1/+1
2024-05-06Merge tag 'ipsec-next-2024-05-03' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski8-9/+196
2024-05-03net: Remove ctl_table sentinel elements from several networking subsystemsJoel Granados1-4/+1
2024-05-01xfrm: Restrict SA direction attribute to specific netlink message typesAntony Antony1-0/+24
2024-05-01xfrm: Add dir validation to "in" data path lookupAntony Antony2-0/+12
2024-05-01xfrm: Add dir validation to "out" data path lookupAntony Antony2-0/+7
2024-05-01xfrm: Add Direction to the SA in or outAntony Antony5-9/+153
2024-04-29ipv6: introduce dst_rt6_info() helperEric Dumazet1-2/+1
2024-04-26xfrm: Preserve vlan tags for transport mode software GROPaul Davey1-0/+8
2024-04-22sysctl: treewide: constify ctl_table_header::ctl_table_argThomas Weißschuh1-1/+1
2024-04-11xfrm: fix possible derferencing in error pathAntony Antony1-0/+2
2024-03-18xfrm: Allow UDP encapsulation only in offload modesipsec-2024-03-19Leon Romanovsky1-1/+2
2024-03-08Merge tag 'ipsec-next-2024-03-06' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller2-14/+143
2024-03-07net: move netdev_max_backlog to net_hotdataEric Dumazet2-2/+5
2024-03-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-4/+13
2024-03-06Merge tag 'ipsec-2024-03-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski4-4/+13
2024-03-05xfrm: set skb control buffer based on packet offload as wellMike Yu1-1/+5
2024-03-05xfrm: fix xfrm child route lookup for packet offloadMike Yu1-1/+3
2024-03-02Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf...Jakub Kicinski2-4/+4
2024-02-27xfrm: Do not allocate stats in the driverBreno Leitao1-8/+2
2024-02-26rtnetlink: prepare nla_put_iflink() to run under RCUEric Dumazet1-1/+1
2024-02-26xfrm: Avoid clang fortify warning in copy_to_user_tmpl()Nathan Chancellor1-0/+3
2024-02-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-0/+2
2024-02-09net: fill in MODULE_DESCRIPTION()s for xfrmBreno Leitao2-0/+2
2024-02-09xfrm: Simplify the allocation of slab caches in xfrm_policy_initKunwu Chan1-4/+1
2024-02-07xfrm: interface: use exit_batch_rtnl() methodEric Dumazet1-8/+6
2024-02-05xfrm: get global statistics from the offloaded deviceLeon Romanovsky2-0/+14
2024-02-05xfrm: generalize xdo_dev_state_update_curlft to allow statistics updateLeon Romanovsky2-3/+3
2024-01-31bpf: treewide: Annotate BPF kfuncs in BTFDaniel Xu2-4/+4
2024-01-25xfrm: Pass UDP encapsulation in TX packet offloadLeon Romanovsky1-1/+1
2024-01-25xfrm: introduce forwarding of ICMP Error messagesAntony Antony1-2/+140
2024-01-17xfrm: Clear low order bits of ->flowi4_tos in decode_session4().Guillaume Nault1-1/+1
2023-12-14bpf: xfrm: Add bpf_xdp_get_xfrm_state() kfuncDaniel Xu3-0/+137
2023-11-09Merge tag 'net-6.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds1-4/+2
2023-11-02Merge tag 'v6.7-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds2-12/+8
2023-11-01bpf: Add __bpf_kfunc_{start,end}_defs macrosDave Marchevsky1-4/+2
2023-10-30Merge tag 'ipsec-next-2023-10-28' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski3-180/+129
2023-10-27xfrm: policy: fix layer 4 flowi decodingFlorian Westphal1-6/+20
2023-10-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2-23/+26
2023-10-17Merge tag 'ipsec-2023-10-17' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2-23/+26
2023-10-13xfrm: fix a data-race in xfrm_lookup_with_ifid()ipsec-2023-10-17Eric Dumazet1-1/+1
2023-10-06xfrm: policy: replace session decode with flow dissectorFlorian Westphal1-158/+95
2023-10-06xfrm: move mark and oif flowi decode into common codeFlorian Westphal1-12/+12
2023-10-06xfrm: pass struct net to xfrm_decode_session wrappersFlorian Westphal2-7/+7
2023-10-06xfrm: Use the XFRM_GRO to indicate a GRO call on inputSteffen Klassert1-4/+2
2023-10-01ipsec: Select CRYPTO_AEADHerbert Xu1-0/+1
2023-09-20ipsec: Stop using crypto_has_algHerbert Xu1-12/+7
2023-09-13xfrm: fix a data-race in xfrm_gen_index()Eric Dumazet1-4/+2
2023-09-12net: dst: remove unnecessary input parameter in dst_alloc and dst_initZhengchao Shao1-1/+1
2023-09-06xfrm: interface: use DEV_STATS_INC()Eric Dumazet1-12/+10
2023-09-05net: xfrm: skip policies marked as dead while reinserting policiesDong Chenchen1-6/+13
2023-08-29Merge tag 'sysctl-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Linus Torvalds1-2/+6
2023-08-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski5-24/+27
2023-08-16Merge tag 'ipsec-2023-08-15' of git://git.kernel.org/pub/scm/linux/kernel/git...David S. Miller5-24/+27
2023-08-15networking: Update to register_net_sysctl_szJoel Granados1-2/+6
2023-08-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2023-08-01xfrm: don't skip free of empty state in acquire policyipsec-2023-08-15Leon Romanovsky1-6/+2
2023-08-01xfrm: delete offloaded policyLeon Romanovsky1-0/+1
2023-07-31xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESHLin Ma1-0/+1
2023-07-31xfrm: add NULL check in xfrm_update_ae_paramsLin Ma1-1/+1
2023-07-29net: annotate data-races around sk->sk_markEric Dumazet1-1/+1
2023-07-25xfrm: Support UDP encapsulation in packet offload modeLeon Romanovsky1-6/+7
2023-07-11xfrm: fix slab-use-after-free in decode_session6Zhengchao Shao1-2/+2
2023-07-10xfrm: Silence warnings triggerable by bad packetsHerbert Xu1-13/+9
2023-07-03net: xfrm: Amend XFRMA_SEC_CTX nla_policy structureLin Ma2-2/+2
2023-06-29net: xfrm: Fix xfrm_address_filter OOB readLin Ma1-0/+9
2023-06-24tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usageDavid Howells1-4/+6
2023-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-8/+68
2023-06-12xfrm: Use xfrm_state selector for BEET inputHerbert Xu1-4/+3
2023-06-10net: move gso declarations and functions to their own filesEric Dumazet3-0/+3
2023-06-07xfrm: add missed call to delete offloaded policiesLeon Romanovsky1-0/+2
2023-05-23espintcp: Inline do_tcp_sendpages()David Howells1-3/+7
2023-05-21xfrm: Ensure policies always checked on XFRM-I input pathBenedict Wong1-4/+50
2023-05-21xfrm: Treat already-verified secpath entries as optionalBenedict Wong2-0/+13
2023-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski4-70/+21
2023-05-16Merge tag 'ipsec-2023-05-16' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski4-70/+21
2023-05-13net: introduce and use skb_frag_fill_page_desc()Yunsheng Lin1-4/+1
2023-05-10xfrm: Check if_id in inbound policy/secpath matchipsec-2023-05-16Benedict Wong1-5/+6
2023-05-10xfrm: Reject optional tunnel/BEET mode templates in outbound policiesTobias Brunner1-5/+9
2023-04-25Revert "Fix XFRM-I support for nested ESP tunnels"Martin Willi2-53/+4
2023-04-21xfrm: Fix leak of dev trackerLeon Romanovsky1-1/+1
2023-04-21xfrm: release all offloaded policy memoryLeon Romanovsky1-0/+1
2023-04-19Merge tag 'ipsec-next-2023-04-19' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski2-65/+34
2023-04-07Merge tag 'ipsec-esn-replay' of https://git.kernel.org/pub/scm/linux/kernel/g...Jakub Kicinski1-1/+1
2023-04-06xfrm: don't check the default policy if the policy allows the packetSabrina Dubroca1-6/+0
2023-04-06xfrm: don't require advance ESN callback for packet offloadLeon Romanovsky1-1/+1
2023-03-22Merge tag 'ipsec-libreswan-mlx5' of https://git.kernel.org/pub/scm/linux/kern...Jakub Kicinski2-0/+3
2023-03-20xfrm: copy_to_user_state fetch offloaded SA packets/bytes statisticsRaed Salem1-0/+2
2023-03-20xfrm: add new device offload acquire flagRaed Salem1-0/+1