aboutsummaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_user.c
AgeCommit message (Expand)AuthorFilesLines
2025-11-14xfrm: fix memory leak in xfrm_add_acquire()Zilin Guan1-0/+3
2025-10-21xfrm: set err and extack on failure to create pcpu SASabrina Dubroca1-1/+4
2025-08-15xfrm: xfrm_user: use strscpy() for alg_nameMiguel GarcĂ­a1-5/+5
2025-07-08Revert "xfrm: destroy xfrm_state synchronously on net exit path"Sabrina Dubroca1-1/+1
2025-06-12xfrm: always initialize offload pathLeon Romanovsky1-0/+1
2025-05-15xfrm: validate assignment of maximal possible SEQ numberLeon Romanovsky1-10/+42
2025-04-17xfrm: Migrate offload configurationChiachang Wang1-3/+12
2025-04-11xfrm: Remove unnecessary strscpy_pad() size argumentsThorsten Blum1-5/+5
2025-02-21xfrm: simplify SA initialization routineLeon Romanovsky1-1/+1
2025-02-21xfrm: delay initialization of offload path till its actually requestedLeon Romanovsky1-1/+1
2025-02-12xfrm: prevent high SEQ input in non-ESN modeLeon Romanovsky1-0/+12
2024-12-05xfrm: add generic iptfs defines and functionalityChristian Hopps1-0/+12
2024-12-05xfrm: add mode_cbs module functionalityChristian Hopps1-0/+13
2024-12-05xfrm: netlink: add config (netlink) optionsChristian Hopps1-0/+52
2024-11-18Merge tag 'ipsec-next-2024-11-15' of git://git.kernel.org/pub/scm/linux/kerne...David S. Miller1-5/+70
2024-11-14xfrm: replace deprecated strncpy with strscpy_padDaniel Yang1-1/+1
2024-11-14xfrm: Add error handling when nla_put_u32() returns an errorEverest K.C1-1/+4
2024-11-11net: convert to nla_get_*_default()Johannes Berg1-5/+3
2024-10-29xfrm: Restrict percpu SA attribute to specific netlink message typesSteffen Klassert1-0/+14
2024-10-29xfrm: Add support for per cpu xfrm state handling.Steffen Klassert1-4/+52
2024-10-24Merge tag 'ipsec-2024-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni1-2/+8
2024-10-11xfrm: fix one more kernel-infoleak in algo dumpingPetr Vaganov1-1/+3
2024-10-07xfrm: validate new SA's prefixlen using SA family when sel.family is unsetSabrina Dubroca1-1/+5
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro1-1/+1
2024-07-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+0
2024-07-08xfrm: call xfrm_dev_policy_delete when kill policyJianbo Liu1-1/+0
2024-06-26xfrm: support sending NAT keepalives in ESP in UDP statesEyal Birger1-0/+15
2024-05-01xfrm: Restrict SA direction attribute to specific netlink message typesAntony Antony1-0/+24
2024-05-01xfrm: Add Direction to the SA in or outAntony Antony1-6/+132
2024-03-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+3
2024-03-06Merge tag 'ipsec-2024-03-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-0/+3
2024-02-26xfrm: Avoid clang fortify warning in copy_to_user_tmpl()Nathan Chancellor1-0/+3
2024-02-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+1
2024-02-09net: fill in MODULE_DESCRIPTION()s for xfrmBreno Leitao1-0/+1
2024-02-05xfrm: generalize xdo_dev_state_update_curlft to allow statistics updateLeon Romanovsky1-1/+1
2023-08-01xfrm: delete offloaded policyLeon Romanovsky1-0/+1
2023-07-31xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESHLin Ma1-0/+1
2023-07-31xfrm: add NULL check in xfrm_update_ae_paramsLin Ma1-1/+1
2023-07-03net: xfrm: Amend XFRMA_SEC_CTX nla_policy structureLin Ma1-1/+1
2023-06-29net: xfrm: Fix xfrm_address_filter OOB readLin Ma1-0/+9
2023-05-16Merge tag 'ipsec-2023-05-16' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-5/+10
2023-05-10xfrm: Reject optional tunnel/BEET mode templates in outbound policiesTobias Brunner1-5/+9
2023-04-21xfrm: release all offloaded policy memoryLeon Romanovsky1-0/+1
2023-03-22Merge tag 'ipsec-libreswan-mlx5' of https://git.kernel.org/pub/scm/linux/kern...Jakub Kicinski1-0/+2
2023-03-20xfrm: copy_to_user_state fetch offloaded SA packets/bytes statisticsRaed Salem1-0/+2
2023-02-13xfrm: Zero padding when dumping algos and encapHerbert Xu1-4/+41
2022-12-05xfrm: add an interface to offload policyLeon Romanovsky1-0/+18
2022-12-05xfrm: add new packet offload flagLeon Romanovsky1-0/+2
2022-11-25xfrm: add extack to xfrm_set_spdinfoSabrina Dubroca1-4/+12
2022-11-25xfrm: add extack to xfrm_alloc_userspiSabrina Dubroca1-3/+5
2022-11-25xfrm: add extack to xfrm_do_migrateSabrina Dubroca1-5/+11
2022-11-25xfrm: add extack to xfrm_new_ae and xfrm_replay_verify_lenSabrina Dubroca1-9/+28
2022-11-25xfrm: add extack to xfrm_del_saSabrina Dubroca1-1/+1
2022-11-25xfrm: add extack to xfrm_add_sa_expireSabrina Dubroca1-1/+4
2022-11-25xfrm: a few coding style clean upsSabrina Dubroca1-3/+3
2022-09-22xfrm: add extack support to xfrm_init_replaySabrina Dubroca1-1/+1
2022-09-22xfrm: add extack to __xfrm_init_stateSabrina Dubroca1-1/+1
2022-09-22xfrm: add extack to attach_*Sabrina Dubroca1-16/+30
2022-09-22xfrm: add extack support to xfrm_dev_state_addSabrina Dubroca1-3/+5
2022-09-22xfrm: add extack to verify_one_alg, verify_auth_trunc, verify_aeadSabrina Dubroca1-11/+20
2022-09-22xfrm: add extack to verify_replaySabrina Dubroca1-8/+22
2022-09-22xfrm: add extack support to verify_newsa_infoSabrina Dubroca1-21/+69
2022-08-31xfrm: add extack to verify_sec_ctx_lenSabrina Dubroca1-7/+9
2022-08-31xfrm: add extack to validate_tmplSabrina Dubroca1-9/+20
2022-08-31xfrm: add extack to verify_policy_typeSabrina Dubroca1-11/+17
2022-08-31xfrm: add extack to verify_policy_dirSabrina Dubroca1-4/+5
2022-08-31xfrm: add extack support to verify_newpolicy_infoSabrina Dubroca1-7/+18
2022-08-31xfrm: propagate extack to all netlink doit handlersSabrina Dubroca1-22/+34
2022-06-24xfrm: change the type of xfrm_register_km and xfrm_unregister_kmZhengchao Shao1-4/+2
2022-05-06xfrm: store and rely on direction to construct offload flagsLeon Romanovsky1-1/+2
2022-05-06xfrm: rename xfrm_state_offload struct to allow reuseLeon Romanovsky1-1/+1
2022-03-19Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-25/+18
2022-03-18xfrm: rework default policy structureNicolas Dichtel1-25/+18
2022-03-06Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"Kai Lueke1-18/+3
2022-01-26xfrm: Check if_id in xfrm_migrateYan Yan1-1/+5
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-4/+19
2022-01-06Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+17
2021-12-29net: Don't include filter.h from net/sock.hJakub Kicinski1-0/+1
2021-12-23xfrm: rate limit SA mapping change message to user spaceAntony Antony1-1/+17
2021-12-17xfrm: state and policy should fail if XFRMA_IF_ID 0Antony Antony1-3/+18
2021-12-09xfrm: fix a small bug in xfrm_sa_len()Eric Dumazet1-1/+1
2021-11-01Merge tag 'overflow-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2021-10-18xfrm: Use memset_after() to clear paddingKees Cook1-1/+1
2021-09-23xfrm: fix rcu lock in xfrm_notify_userpolicy()Nicolas Dichtel1-1/+6
2021-09-15xfrm: notify default policy on updateNicolas Dichtel1-0/+31
2021-09-15xfrm: make user policy API completeNicolas Dichtel1-17/+19
2021-09-09net: xfrm: fix shift-out-of-bounds in xfrm_get_defaultPavel Skripkin1-0/+5
2021-08-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/David S. Miller1-0/+57
2021-07-29net: xfrm: fix shift-out-of-bouncePavel Skripkin1-1/+6
2021-07-21xfrm: Add possibility to set the default to block if we have no policySteffen Klassert1-0/+52
2021-06-29net: xfrm: fix memory leak in xfrm_user_rcv_msgPavel Skripkin1-0/+10
2021-06-23Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-14/+14
2021-06-14xfrm: Fix error reporting in xfrm_state_construct.Steffen Klassert1-14/+14
2021-04-19xfrm: avoid synchronize_rcu during netns destructionFlorian Westphal1-3/+7
2021-03-28xfrm_user.c: Added a punctuationBhaskar Chowdhury1-1/+1
2021-02-04xfrm: Return the correct errno codeZheng Yongjun1-1/+1
2020-11-27xfrm: redact SA secret with lockdown confidentialityAntony Antony1-7/+67
2020-09-24xfrm/compat: Add 32=>64-bit messages translatorDmitry Safonov1-18/+39
2020-09-24xfrm/compat: Attach xfrm dumps to 64=>32 bit translatorDmitry Safonov1-0/+38
2020-09-24xfrm/compat: Add 64=>32-bit messages translatorDmitry Safonov1-1/+14
2020-06-24xfrm: policy: match with both mark and mask on user interfacesXin Long1-7/+11
2020-02-12xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquireXin Long1-0/+3
2020-02-12xfrm: fix uctx len check in verify_sec_ctx_lenXin Long1-1/+2
2019-07-05Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+19
2019-06-17xfrm: fix sa selector validationNicolas Dichtel1-0/+3
2019-05-28xfrm: Fix xfrm sel prefix length validationAnirudh Gupta1-0/+16
2019-05-21treewide: Add SPDX license identifier for more missed filesThomas Gleixner1-0/+1
2019-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-14/+2
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-5/+5
2019-03-26xfrm: clean up xfrm protocol checksCong Wang1-13/+1
2019-03-20Revert "net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrm"Steffen Klassert1-23/+7
2019-03-08net: xfrm: Add '_rcu' tag for rcu protected pointer in netns_xfrmSu Yanjun1-7/+23
2019-03-01xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlinkYueHaibing1-1/+1
2019-02-05xfrm: destroy xfrm_state synchronously on net exit pathCong Wang1-1/+1
2019-01-10xfrm: refine validation of template and selector familiesFlorian Westphal1-4/+9
2018-12-18Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-2/+2
2018-11-23xfrm_user: fix freeing of xfrm states on acquireMathias Krause1-2/+2
2018-11-01compat: Cleanup in_compat_syscall() callersDmitry Safonov1-2/+0
2018-10-08net: Add extack to nlmsg_parseDavid Ahern1-1/+1
2018-10-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+15
2018-09-20xfrm: validate template modeSean Tranchetti1-0/+3
2018-08-03xfrm: Validate address prefix lengths in the xfrm selector.Steffen Klassert1-0/+12
2018-08-02Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-7/+11
2018-07-27Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-12/+82
2018-07-24xfrm: remove blank lines at EOFStephen Hemminger1-1/+0
2018-06-25xfrm: free skb if nlsk pointer is NULLFlorian Westphal1-4/+6
2018-06-23xfrm: Add a new lookup key to match xfrm interfaces.Steffen Klassert1-6/+48
2018-06-23xfrm: Extend the output_mark to support input direction and masking.Steffen Klassert1-10/+38
2018-06-19xfrm_user: prevent leaking 2 bytes of kernel memoryEric Dumazet1-3/+5
2018-02-13xfrm_user: uncoditionally validate esn replay attribute structFlorian Westphal1-13/+8
2018-01-18xfrm: Add SA to hardware at the end of xfrm_state_construct()Yossi Kuperman1-7/+11
2017-12-08xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.Steffen Klassert1-0/+9
2017-12-01xfrm: fix XFRMA_OUTPUT_MARK policy entryMichal Kubecek1-1/+1
2017-11-29xfrm: check id proto in validate_tmpl()Cong Wang1-0/+15
2017-11-01Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-47/+58
2017-10-26net: xfrm_user: use BUG_ON instead of if condition followed by BUGGustavo A. R. Silva1-18/+27
2017-10-23ipsec: Fix aborted xfrm policy dump crashHerbert Xu1-10/+15
2017-09-25xfrm: eradicate size_tAlexey Dobriyan1-21/+23
2017-09-25xfrm: make xfrm_replay_state_esn_len() return unsigned intAlexey Dobriyan1-5/+5
2017-09-25xfrm: make xfrm_alg_auth_len() return unsigned intAlexey Dobriyan1-1/+1
2017-09-25xfrm: make xfrm_alg_len() return unsigned intAlexey Dobriyan1-1/+1
2017-09-25xfrm: make aead_len() return unsigned intAlexey Dobriyan1-1/+1
2017-09-11xfrm: Fix deletion of offloaded SAs on failure.Steffen Klassert1-0/+1
2017-09-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+5
2017-08-31xfrm: Fix return value check of copy_sec_ctx.Steffen Klassert1-2/+2
2017-08-28xfrm_user: fix info leak in build_aevent()Mathias Krause1-0/+1
2017-08-28xfrm_user: fix info leak in build_expire()Mathias Krause1-0/+2
2017-08-28xfrm_user: fix info leak in xfrm_notify_sa()Mathias Krause1-0/+1
2017-08-28xfrm_user: fix info leak in copy_user_offload()Mathias Krause1-1/+1
2017-08-11net: xfrm: support setting an output mark.Lorenzo Colitti1-0/+11
2017-08-02xfrm: Auto-load xfrm offload modulesIlan Tayari1-1/+1
2017-07-18xfrm: remove flow cacheFlorian Westphal1-3/+0
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2017-06-12xfrm: move xfrm_garbage_collect out of xfrm_policy_flushHangbin Liu1-0/+1
2017-06-07xfrm: add UDP encapsulation port in migrate messageAntony Antony1-6/+17
2017-06-07xfrm: extend MIGRATE with UDP encapsulation portAntony Antony1-2/+12
2017-05-02Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-5/+36
2017-05-02Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-3/+3
2017-05-01xfrm: Indicate xfrm_state offload errorsIlan Tayari1-3/+6
2017-04-21Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-0/+28
2017-04-14xfrm: Add an IPsec hardware offloading APISteffen Klassert1-0/+28
2017-04-13netlink: pass extended ACK struct where availableJohannes Berg1-1/+1
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-3/+3
2017-04-13netlink: extended ACK reportingJohannes Berg1-1/+2
2017-04-11Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+0
2017-04-10xfrm: Prepare for CRYPTO_MAX_ALG_NAME expansionHerbert Xu1-3/+3
2017-03-29xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harderAndy Whitcroft1-1/+5
2017-03-29xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_windowAndy Whitcroft1-0/+3
2017-03-24xfrm: remove unused struct xfrm_mgr::idAlexey Dobriyan1-1/+0
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-11-30xfrm_user: fix return value from xfrm_user_rcv_msgYi Zhao1-1/+1
2016-09-09xfrm_user: propagate sec ctx allocation errorsMathias Krause1-3/+6
2016-07-27xfrm: get rid of another incorrect WARNVegard Nossum1-3/+0
2016-07-27xfrm: get rid of incorrect WARNVegard Nossum1-3/+1
2016-07-18xfrm: fix crash in XFRM_MSG_GETSA netlink handlerVegard Nossum1-3/+3
2016-04-23xfrm: align nlattr properly when neededNicolas Dichtel1-4/+6
2016-03-22net/xfrm_user: use in_compat_syscall to deny compat syscallsAndy Lutomirski1-1/+1
2015-10-30Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-1/+4
2015-10-23xfrm: Fix unaligned access to stats in copy_to_user_state()Sowmini Varadhan1-1/+4
2015-09-29xfrm: Fix state threshold configuration from userspaceMichael Rossberg1-1/+3
2015-08-11net/xfrm: use kmemdup rather than duplicating its implementationAndrzej Hajda1-4/+2
2015-07-21xfrm: Fix a typoJakub Wilk1-1/+1
2015-05-28ipsec: Add IV generator information to xfrm_stateHerbert Xu1-9/+31
2015-03-03xfrm: Do not parse 32bits compiled xfrm netlink msg on 64bits hostFan Du1-0/+5
2015-01-18netlink: make nlmsg_end() and genlmsg_end() voidJohannes Berg1-9/+18
2014-11-03xfrm: add XFRMA_REPLAY_VAL attribute to SA messagesdingzhi1-4/+8
2014-09-18ipsec: Remove obsolete MAX_AH_AUTH_LENHerbert Xu1-2/+1
2014-09-02xfrm: configure policy hash table thresholds by netlinkChristophe Gouault1-3/+77
2014-06-30xfrm: Fix installation of AH IPsec SAsTobias Brunner1-4/+3
2014-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-11/+25
2014-06-03xfrm: fix race between netns cleanup and state expire notificationMichal Kubecek1-11/+25
2014-05-22Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-45/+8
2014-04-24net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman1-1/+1
2014-04-23xfrm: Remove useless xfrm_audit struct.Tetsuo Handa1-30/+8
2014-04-22xfrm: Remove useless secid field from xfrm_audit.Tetsuo Handa1-21/+6
2014-03-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+3
2014-03-18Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller1-4/+4
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov1-3/+3
2014-03-07xfrm: rename struct xfrm_filterNicolas Dichtel1-4/+4
2014-03-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+0