netdev - Re: pull request (net): ipsec 2015-10-22

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20151022.074712.1584968096853138087.davem@davemloft.net>
Date:	Thu, 22 Oct 2015 07:47:12 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	steffen.klassert@...unet.com
Cc:	herbert@...dor.apana.org.au, netdev@...r.kernel.org
Subject: Re: pull request (net): ipsec 2015-10-22

From: Steffen Klassert <steffen.klassert@...unet.com>
Date: Thu, 22 Oct 2015 08:07:15 +0200

> 1) Fix IPsec pre-encap fragmentation for GSO packets.
>    From Herbert Xu.
> 
> 2) Fix some header checks in _decode_session6.
>    We skip the header informations if the data pointer points
>    already behind the header in question for some protocols.
>    This is because we call pskb_may_pull with a negative value
>    converted to unsigened int from pskb_may_pull in this case.
>    Skipping the header informations can lead to incorrect policy
>    lookups. From Mathias Krause.
> 
> 3) Allow to change the replay threshold and expiry timer of a
>    state without having to set other attributes like replay
>    counter and byte lifetime. Changing these other attributes
>    may break the SA. From Michael Rossberg.
> 
> 4) Fix pmtu discovery for local generated packets.
>    We may fail dispatch to the inner address family.
>    As a reault, the local error handler is not called
>    and the mtu value is not reported back to userspace.
> 
> Please pull or let me know if there are problems.

Pulled, thanks a lot Steffen.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html