netdev - [PATCH v1 0/2] Fix issues in xfrm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20211223004555.1284666-1-evitayan@google.com>
Date:   Wed, 22 Dec 2021 16:45:53 -0800
From:   Yan Yan <evitayan@...gle.com>
To:     steffen.klassert@...unet.com
Cc:     herbert@...dor.apana.org.au, davem@...emloft.net,
        netdev@...r.kernel.org, nharold@...gle.com,
        benedictwong@...gle.com, maze@...gle.com, lorenzo@...gle.com,
        Yan Yan <evitayan@...gle.com>
Subject: [PATCH v1 0/2] Fix issues in xfrm_migrate

This patch series include two patches to fix two issues in xfrm_migrate.

PATCH 1/2 enables distinguishing SAs and SPs based on if_id during the
xfrm_migrate flow. It fixes the problem that when there are multiple
existing SPs with the same direction, the same xfrm_selector and
different endpoint addresses, xfrm_migrate might fail.

PATCH 2/2 enables xfrm_migrate to handle address family change by
breaking the original xfrm_state_clone method into two steps so as to
update the props.family before running xfrm_init_state.

Yan Yan (2):
  xfrm: Check if_id in xfrm_migrate
  xfrm: Fix xfrm migrate issues when address family changes

 include/net/xfrm.h     |  5 +++--
 net/xfrm/xfrm_policy.c | 14 ++++++++------
 net/xfrm/xfrm_state.c  | 38 +++++++++++++++++++++++++++-----------
 net/xfrm/xfrm_user.c   |  6 +++++-
 4 files changed, 43 insertions(+), 20 deletions(-)

-- 
2.34.1.307.g9b7440fafd-goog