netdev - [PATCH net-next 0/6] xfrm: Convert __xfrm4_dst_lookup() and its callers to dscp

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <cover.1728982714.git.gnault@redhat.com>
Date: Tue, 15 Oct 2024 11:11:22 +0200
From: Guillaume Nault <gnault@...hat.com>
To: David Miller <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>,
	Paolo Abeni <pabeni@...hat.com>, Eric Dumazet <edumazet@...gle.com>
Cc: netdev@...r.kernel.org, Steffen Klassert <steffen.klassert@...unet.com>,
	Herbert Xu <herbert@...dor.apana.org.au>,
	David Ahern <dsahern@...nel.org>, Ido Schimmel <idosch@...dia.com>
Subject: [PATCH net-next 0/6] xfrm: Convert __xfrm4_dst_lookup() and its
 callers to dscp_t.

This patch series continues to prepare users of ->flowi4_tos to a
future conversion of this field (__u8 to dscp_t). This time, we convert
__xfrm4_dst_lookup() and its call chain.

The objective is to eventually make all users of ->flowi4_tos use a
dscp_t value. Making ->flowi4_tos a dscp_t field will help avoiding
regressions where ECN bits are erroneously interpreted as DSCP bits.

Guillaume Nault (6):
  xfrm: Convert xfrm_get_tos() to dscp_t.
  xfrm: Convert xfrm_bundle_create() to dscp_t.
  xfrm: Convert xfrm_dst_lookup() to dscp_t.
  xfrm: Convert __xfrm_dst_lookup() to dscp_t.
  xfrm: Convert the ->dst_lookup() callback to dscp_t.
  xfrm: Convert __xfrm4_dst_lookup() to dscp_t.

 include/net/xfrm.h      |  7 ++++---
 net/ipv4/xfrm4_policy.c | 14 ++++++++------
 net/ipv6/xfrm6_policy.c |  5 +++--
 net/xfrm/xfrm_policy.c  | 20 ++++++++++----------
 4 files changed, 25 insertions(+), 21 deletions(-)

Note: I'm sending this series to net-next as these are generic
networking changes, although they only touch xfrm files. But I'm happy
to rebase over ipsec-next if that's prefered. Just let me know.

-- 
2.39.2