aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_policy.c
AgeCommit message (Expand)AuthorFilesLines
2025-08-26ipv4: Convert ->flowi4_tos to dscp_t.Guillaume Nault1-3/+3
2025-08-19xfrm: Switch to skb_dstref_steal to clear dst_entryStanislav Fomichev1-2/+8
2025-07-02net: dst: annotate data-races around dst->obsoleteEric Dumazet1-2/+2
2025-06-08treewide, timers: Rename from_timer() to timer_container_of()timers-cleanups-2025-06-08Ingo Molnar1-2/+2
2025-05-26Merge tag 'ipsec-next-2025-05-23' of git://git.kernel.org/pub/scm/linux/kerne...Paolo Abeni1-2/+2
2025-05-14xfrm: Sanitize marks before insertPaul Chaignon1-0/+3
2025-04-17xfrm: Migrate offload configurationChiachang Wang1-2/+2
2025-04-05treewide: Switch/rename to timer_delete[_sync]()Thomas Gleixner1-5/+5
2025-03-19xfrm: Remove unnecessary NULL check in xfrm_lookup_with_ifid()Dan Carpenter1-1/+1
2025-01-27Merge tag 'ipsec-2025-01-27' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-1/+1
2025-01-20xfrm: Fix the usage of skb->skSteffen Klassert1-1/+1
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps1-2/+6
2024-12-05xfrm: add mode_cbs module functionalityChristian Hopps1-7/+11
2024-11-06xfrm: Convert struct xfrm_dst_lookup_params -> tos to dscp_t.Guillaume Nault1-1/+1
2024-11-06xfrm: Convert xfrm_dst_lookup() to dscp_t.Guillaume Nault1-5/+4
2024-11-06xfrm: Convert xfrm_bundle_create() to dscp_t.Guillaume Nault1-3/+4
2024-11-06xfrm: Convert xfrm_get_tos() to dscp_t.Guillaume Nault1-3/+3
2024-10-29xfrm: Cache used outbound xfrm states at the policy.Steffen Klassert1-0/+12
2024-09-24xfrm: policy: remove last remnants of pernet inexact listFlorian Westphal1-3/+0
2024-09-23xfrm: respect ip protocols rules criteria when performing dst lookupsEyal Birger1-0/+15
2024-09-23xfrm: extract dst lookup parameters into a structEyal Birger1-12/+23
2024-09-10Merge tag 'ipsec-next-2024-09-10' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-122/+100
2024-09-09xfrm: policy: Restore dir assignments in xfrm_hash_rebuild()Nathan Chancellor1-0/+2
2024-09-09xfrm: policy: fix null dereferenceFlorian Westphal1-2/+2
2024-08-31xfrm: Unmask upper DSCP bits in xfrm_get_tos()Ido Schimmel1-1/+2
2024-08-28xfrm: minor update to sdb and xfrm_policy commentsFlorian Westphal1-1/+5
2024-08-28xfrm: policy: use recently added helper in more placesFlorian Westphal1-11/+2
2024-08-24xfrm: policy: remove remaining use of inexact listFlorian Westphal1-38/+0
2024-08-24xfrm: switch migrate to xfrm_policy_lookup_bytypeFlorian Westphal1-67/+39
2024-08-24xfrm: policy: don't iterate inexact policies twice at insert timeFlorian Westphal1-6/+53
2024-07-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+2
2024-07-14Merge tag 'ipsec-next-2024-07-13' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-1/+12
2024-07-14Merge tag 'ipsec-2024-07-11' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-3/+2
2024-07-12xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO pathMike Yu1-1/+4
2024-07-08xfrm: call xfrm_dev_policy_delete when kill policyJianbo Liu1-3/+2
2024-06-26xfrm: support sending NAT keepalives in ESP in UDP statesEyal Birger1-0/+8
2024-05-29net: fix __dst_negative_advice() raceEric Dumazet1-8/+3
2024-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+2
2024-05-06Merge tag 'ipsec-next-2024-05-03' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-0/+6
2024-05-01xfrm: Add dir validation to "out" data path lookupAntony Antony1-0/+6
2024-04-29ipv6: introduce dst_rt6_info() helperEric Dumazet1-2/+1
2024-04-11xfrm: fix possible derferencing in error pathAntony Antony1-0/+2
2024-03-08Merge tag 'ipsec-next-2024-03-06' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-6/+141
2024-03-05xfrm: fix xfrm child route lookup for packet offloadMike Yu1-1/+3
2024-02-09xfrm: Simplify the allocation of slab caches in xfrm_policy_initKunwu Chan1-4/+1
2024-01-25xfrm: introduce forwarding of ICMP Error messagesAntony Antony1-2/+140
2024-01-17xfrm: Clear low order bits of ->flowi4_tos in decode_session4().Guillaume Nault1-1/+1
2023-12-14bpf: xfrm: Add bpf_xdp_get_xfrm_state() kfuncDaniel Xu1-0/+2
2023-10-30Merge tag 'ipsec-next-2023-10-28' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-174/+125
2023-10-27xfrm: policy: fix layer 4 flowi decodingFlorian Westphal1-6/+20
2023-10-19Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-11/+16
2023-10-13xfrm: fix a data-race in xfrm_lookup_with_ifid()Eric Dumazet1-1/+1
2023-10-06xfrm: policy: replace session decode with flow dissectorFlorian Westphal1-158/+95
2023-10-06xfrm: move mark and oif flowi decode into common codeFlorian Westphal1-12/+12
2023-10-06xfrm: pass struct net to xfrm_decode_session wrappersFlorian Westphal1-5/+5
2023-09-13xfrm: fix a data-race in xfrm_gen_index()Eric Dumazet1-4/+2
2023-09-12net: dst: remove unnecessary input parameter in dst_alloc and dst_initZhengchao Shao1-1/+1
2023-09-05net: xfrm: skip policies marked as dead while reinserting policiesDong Chenchen1-6/+13
2023-07-29net: annotate data-races around sk->sk_markEric Dumazet1-1/+1
2023-06-07xfrm: add missed call to delete offloaded policiesLeon Romanovsky1-0/+2
2023-05-21xfrm: Treat already-verified secpath entries as optionalBenedict Wong1-0/+12
2023-05-10xfrm: Check if_id in inbound policy/secpath matchBenedict Wong1-5/+6
2023-04-25Revert "Fix XFRM-I support for nested ESP tunnels"Martin Willi1-3/+0
2023-04-06xfrm: don't check the default policy if the policy allows the packetSabrina Dubroca1-6/+0
2023-01-27xfrm: annotate data-race around use_timeEric Dumazet1-4/+7
2023-01-09Fix XFRM-I support for nested ESP tunnelsBenedict Wong1-0/+3
2022-12-05xfrm: speed-up lookup of HW policiesLeon Romanovsky1-5/+11
2022-12-05xfrm: add an interface to offload policyLeon Romanovsky1-0/+69
2022-11-25xfrm: add extack to xfrm_do_migrateSabrina Dubroca1-8/+20
2022-11-25xfrm: a few coding style clean upsSabrina Dubroca1-3/+6
2022-10-25xfrm: Remove not-used total variableLeon Romanovsky1-2/+2
2022-10-03Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-13/+12
2022-08-29xfrm: interface: support collect metadata modeEyal Birger1-5/+5
2022-08-23xfrm: Drop unused argumentHongbin Wang1-8/+7
2022-08-17xfrm: policy: fix metadata dst->dev xmit null pointer dereferenceNikolay Aleksandrov1-1/+1
2022-07-26xfrm: fix refcount leak in __xfrm_policy_check()Xin Xiong1-0/+1
2022-06-02xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()Hangyu Hua1-1/+4
2022-05-17xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdownXin Long1-1/+1
2022-04-04xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookupDavid Ahern1-1/+3
2022-03-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-3/+7
2022-03-18xfrm: rework default policy structureNicolas Dichtel1-3/+7
2022-01-26xfrm: Check if_id in xfrm_migrateYan Yan1-6/+8
2022-01-11xfrm: Don't accidentally set RTO_ONLINK in decode_session4()Guillaume Nault1-1/+2
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+21
2021-12-01net: xfrm: drop check of pols[0] for the second timeJean Sacren1-1/+1
2021-11-23xfrm: fix policy lookup for ipv6 gre packetsGhalem Boudour1-0/+21
2021-11-18xfrm: Remove duplicate assignmentluo penghao1-1/+0
2021-10-18xfrm: Use memset_after() to clear paddingKees Cook1-3/+1
2021-08-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-0/+16
2021-08-04Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-20/+12
2021-07-21xfrm: Add possibility to set the default to block if we have no policySteffen Klassert1-0/+16
2021-07-02xfrm: Fix RCU vs hash_resize_mutex lock inversionFrederic Weisbecker1-9/+8
2021-07-02Revert "xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_l...Steffen Klassert1-14/+7
2021-06-30Merge tag 'net-next-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds1-8/+15
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-7/+14
2021-06-23Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-7/+14
2021-06-11xfrm: policy: fix a spelling mistakegushengxian1-1/+1
2021-06-01xfrm: policy: Read seqcount outside of rcu-read side in xfrm_policy_lookup_by...Varad Gautam1-7/+14
2021-05-10selinux: delete selinux_xfrm_policy_lookup() useless argumentZhongjun Tan1-4/+2
2021-04-19xfrm: remove stray synchronize_rcu from xfrm_initFlorian Westphal1-3/+0
2021-04-19flow: remove spi key from flowi structFlorian Westphal1-39/+0
2021-03-28xfrm_policy.c : Mundane typo fixBhaskar Chowdhury1-1/+1
2021-01-04xfrm: Fix wraparound in xfrm_policy_addr_delta()Visa Hankala1-8/+18
2021-01-04xfrm: fix disable_xfrm sysctl when used on xfrm interfacesEyal Birger1-2/+2
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-08-10Merge tag 'locking-urgent-2020-08-10' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-5/+5
2020-08-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-25/+18
2020-07-29xfrm: policy: Use sequence counters with associated lockAhmed S. Darwish1-5/+5
2020-07-21xfrm: Make the policy hold queue work with VTI.Steffen Klassert1-0/+11
2020-07-17xfrm: policy: fix IPv6-only espintcp compilationSabrina Dubroca1-2/+2
2020-06-24xfrm: policy: match with both mark and mask on user interfacesXin Long1-23/+16
2020-05-25xfrm: fix a warning in xfrm_policy_insert_listXin Long1-6/+1
2020-03-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+2
2020-03-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+2
2020-03-24xfrm: policy: Fix doulbe free in xfrm_policy_timerYueHaibing1-0/+2
2020-03-23Remove DST_HOSTDavid Laight1-2/+1
2020-02-04treewide: remove redundant IS_ERR() before error code checkMasahiro Yamada1-1/+1
2019-12-09xfrm: add espintcp (RFC 8229)Sabrina Dubroca1-0/+7
2019-10-01netfilter: drop bridge nf reset from nf_resetFlorian Westphal1-1/+1
2019-09-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+4
2019-08-24xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md modeHangbin Liu1-2/+2
2019-08-20xfrm: policy: avoid warning splat when merging nodesFlorian Westphal1-2/+4
2019-07-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-8/+7
2019-07-05Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-8/+7
2019-07-03xfrm: policy: fix bydst hlist corruption on hash rebuildFlorian Westphal1-5/+7
2019-07-02xfrm: remove a duplicated assignmentCong Wang1-3/+0
2019-06-06xfrm: remove state and template sort indirections from xfrm_state_afinfoFlorian Westphal1-1/+1
2019-05-21Merge tag 'spdx-5.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds1-0/+1
2019-05-21treewide: Add SPDX license identifier for missed filesThomas Gleixner1-0/+1
2019-05-16xfrm: ressurrect "Fix uninitialized memory read in _decode_session4"Florian Westphal1-11/+13
2019-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2019-04-23xfrm: remove decode_session indirection from afinfo_policyFlorian Westphal1-9/+222
2019-04-23xfrm: remove init_path indirection from afinfo_policyFlorian Westphal1-14/+7
2019-04-23xfrm: remove tos indirection from afinfo_policyFlorian Westphal1-11/+3
2019-04-08xfrm: store xfrm_mode directly, not its addressFlorian Westphal1-1/+1
2019-04-08xfrm: make xfrm modes builtinFlorian Westphal1-1/+1
2019-04-08xfrm: remove afinfo pointer from xfrm_modeFlorian Westphal1-1/+9
2019-03-27xfrm: Honor original L3 slave device in xfrmi policy lookupMartin Willi1-1/+1
2019-02-18xfrm: Fix inbound traffic via XFRM interfaces across network namespacesTobias Brunner1-1/+3
2019-01-16xfrm: Make set-mark default behavior backward compatibleBenedict Wong1-1/+4
2019-01-09xfrm: policy: fix infinite loop when merging src-nodesFlorian Westphal1-8/+7
2019-01-09xfrm: policy: fix reinsertion on node mergeFlorian Westphal1-6/+8
2019-01-09xfrm: policy: delete inexact policies from inexact list on hash rebuildFlorian Westphal1-13/+10
2019-01-09xfrm: policy: increment xfrm_hash_generation on hash rebuildFlorian Westphal1-0/+2
2019-01-09xfrm: policy: use hlist rcu variants on inexact insert, part 2Florian Westphal1-2/+2
2018-12-20Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-3/+0
2018-12-19net: use skb_sec_path helper in more placesFlorian Westphal1-8/+11
2018-12-19xfrm: policy: remove set but not used variable 'priority'YueHaibing1-3/+0
2018-11-28xfrm: policy: fix policy hash rebuildFlorian Westphal1-4/+5
2018-11-15xfrm: policy: fix netlink/pf_key policy lookupsFlorian Westphal1-1/+4
2018-11-15xfrm: policy: add missing indentationColin Ian King1-1/+1
2018-11-09xfrm: policy: add 2nd-level saddr trees for inexact policiesFlorian Westphal1-10/+108
2018-11-09xfrm: policy: store inexact policies in a tree ordered by source addressFlorian Westphal1-4/+42
2018-11-09xfrm: policy: check reinserted policies match their nodeFlorian Westphal1-0/+32
2018-11-09xfrm: policy: store inexact policies in a tree ordered by destination addressFlorian Westphal1-6/+327
2018-11-09xfrm: policy: add inexact policy search tree infrastructureFlorian Westphal1-54/+247
2018-11-09xfrm: policy: consider if_id when hashing inexact policyFlorian Westphal1-9/+16
2018-11-09xfrm: policy: store inexact policies in an rhashtableFlorian Westphal1-18/+332
2018-11-09xfrm: policy: return NULL when inexact search neededFlorian Westphal1-2/+11
2018-11-09xfrm: policy: split list insertion into a helperFlorian Westphal1-16/+27
2018-11-09xfrm: security: iterate all, not inexact listsFlorian Westphal1-67/+26
2018-10-11xfrm: policy: use hlist rcu variants on insertFlorian Westphal1-4/+4
2018-10-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+4
2018-09-11xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.Steffen Klassert1-0/+4
2018-08-02Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+3
2018-07-26xfrm: fix 'passing zero to ERR_PTR()' warningYueHaibing1-1/+4
2018-07-20xfrm: Remove xfrmi interface ID from flowiBenedict Wong1-32/+66
2018-07-11xfrm: use time64_t for in-kernel timestampsArnd Bergmann1-12/+12
2018-06-25xfrm: policy: remove pcpu policy cacheFlorian Westphal1-138/+1
2018-06-23xfrm: Add virtual xfrm interfacesSteffen Klassert1-0/+43
2018-06-23xfrm: Add a new lookup key to match xfrm interfaces.Steffen Klassert1-5/+13
2018-06-23xfrm: Extend the output_mark to support input direction and masking.Steffen Klassert1-2/+3
2018-06-23xfrm: fix missing dst_release() after policy blocking lbcast and multicastTommi Rantala1-0/+3
2018-05-31xfrm Fix potential error pointer dereference in xfrm_bundle_create.Steffen Klassert1-3/+2
2018-03-30xfrm: Register xfrm_dev_notifier in appropriate placeKirill Tkhai1-2/+1
2018-03-29Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+2
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai1-1/+0
2018-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+8
2018-03-07xfrm_policy: use true and false for boolean valuesGustavo A. R. Silva1-1/+1
2018-02-27xfrm: mark kmem_caches as __ro_after_initAlexey Dobriyan1-1/+1
2018-02-20xfrm: Fix infinite loop in xfrm_get_dst_nexthop with transport mode.Steffen Klassert1-2/+2
2018-02-19xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tosXin Long1-2/+5
2018-02-13net: Convert pernet_subsys, registered from inet_init()Kirill Tkhai1-0/+1
2018-02-13xfrm: Fix policy hold queue after flowcache removal.Steffen Klassert1-1/+1
2018-01-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+11
2018-01-10xfrm: Fix a race in the xdst pcpu cache.Steffen Klassert1-1/+7
2018-01-08xfrm: don't call xfrm_policy_cache_flush while holding spinlockFlorian Westphal1-2/+2
2017-12-30xfrm: skip policies marked as dead while rehashingFlorian Westphal1-1/+2
2017-12-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+8
2017-12-15Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+1
2017-12-12xfrm: put policies when reusing pcpu xdst entryFlorian Westphal1-0/+1
2017-12-01xfrm: Fix stack-out-of-bounds read on socket policy lookup.Steffen Klassert1-1/+7
2017-11-30xfrm: Stop using dst->next in bundle construction.David Miller1-24/+32
2017-11-30xfrm: Move dst->path into struct xfrm_dstDavid Miller1-14/+14
2017-11-30ipsec: Create and use new helpers for dst child access.David Miller1-24/+23
2017-11-30net: Create and use new helper xfrm_dst_child().David Miller1-7/+7
2017-11-30net: xfrm: allow clearing socket xfrm policies.Lorenzo Colitti1-1/+1
2017-11-16Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-11/+19
2017-11-15Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find."Steffen Klassert1-11/+18
2017-11-14xfrm: Copy policy family in clone_policyHerbert Xu1-0/+1
generated by cgit 1.2.3-korg (git 2.43.0) at 2025-12-12 05:39:05 +0000