netdev - pull request (net): ipsec 2020-01-21

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 21 Jan 2020 08:16:27 +0100
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: pull request (net): ipsec 2020-01-21

1) Fix packet tx through bpf_redirect() for xfrm and vti
   interfaces. From Nicolas Dichtel.

2) Do not confirm neighbor when do pmtu update on a virtual
   xfrm interface. From Xu Wang.

3) Support output_mark for offload ESP packets, this was
   forgotten when the output_mark was added initially.
   From Ulrich Weber.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit a112adafcb47760feff959ee1ecd10b74d2c5467:

  NFC: pn533: fix bulk-message timeout (2020-01-13 18:50:18 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 4e4362d2bf2a49ff44dbbc9585207977ca3d71d0:

  xfrm: support output_mark for offload ESP packets (2020-01-15 12:18:35 +0100)

----------------------------------------------------------------
Nicolas Dichtel (2):
      vti[6]: fix packet tx through bpf_redirect()
      xfrm interface: fix packet tx through bpf_redirect()

Ulrich Weber (1):
      xfrm: support output_mark for offload ESP packets

Xu Wang (1):
      xfrm: interface: do not confirm neighbor when do pmtu update

 net/ipv4/esp4_offload.c   |  2 ++
 net/ipv4/ip_vti.c         | 13 +++++++++++--
 net/ipv6/esp6_offload.c   |  2 ++
 net/ipv6/ip6_vti.c        | 13 +++++++++++--
 net/xfrm/xfrm_interface.c | 34 ++++++++++++++++++++++++++--------
 5 files changed, 52 insertions(+), 12 deletions(-)