Steffen Klassert 20eb208513 xfrm: Workaround incompatibility of ESN and async crypto ... [ Upstream commit 3b59df46a4 ] ESN for esp is defined in RFC 4303. This RFC assumes that the sequence number counters are always up to date. However, this is not true if an async crypto algorithm is employed. If the sequence number counters are not up to date on sequence number check, we may incorrectly update the upper 32 bit of the sequence number. This leads to a DOS. We workaround this by comparing the upper sequence number, (used for authentication) with the upper sequence number computed after the async processing. We drop the packet if these numbers are different. To do this, we introduce a recheck function that does this check in the ESN case. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2012-10-13 05:38:40 +09:00
..
9p	9p: BUG before corrupting memory	2012-06-22 11:37:15 -07:00
802	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-04-02 17:53:39 -07:00
8021q	net: Fix memory leak - vlan_info struct	2012-08-09 08:31:41 -07:00
appletalk
atm	atm: fix info leak via getsockname()	2012-10-02 10:29:36 -07:00
ax25	net ax25: Reorder ax25_exit to remove races.	2012-04-19 15:37:48 -04:00
batman-adv	batman-adv: only drop packets of known wifi clients	2012-07-16 09:04:11 -07:00
bluetooth	Bluetooth: Fix sending a HCI Authorization Request over LE links	2012-10-02 10:30:34 -07:00
bridge	bridge: Assign rtnl_link_ops to bridge devices created via ioctl (v2)	2012-07-16 09:03:49 -07:00
caif	caif: Fix access to freed pernet memory	2012-08-09 08:31:42 -07:00
can	net: remove skb_orphan_try()	2012-07-16 09:03:48 -07:00
ceph	libceph: isolate kmap() call in write_partial_msg_pages()	2012-03-22 10:47:52 -05:00
core	net: Statically initialize init_net.dev_base_head	2012-10-02 10:30:35 -07:00
dcb
dccp	dccp: fix info leak via getsockopt(DCCP_SOCKOPT_CCID_TX_INFO)	2012-10-02 10:29:37 -07:00
decnet	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
dns_resolver
dsa
econet	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
ethernet	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
ieee802154	6lowpan: add missing spin_lock_init()	2012-04-26 05:32:55 -04:00
ipv4	net: ipv4: ipmr_expire_timer causes crash when removing net namespace	2012-10-02 10:29:50 -07:00
ipv6	ipv6: addrconf: Avoid calling netdevice notifiers with RCU read-side lock	2012-10-02 10:29:35 -07:00
ipx
irda	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
iucv	net: remove skb_orphan_try()	2012-07-16 09:03:48 -07:00
key	net/key/af_key.c: add missing kfree_skb	2012-04-13 11:01:44 -04:00
l2tp	l2tp: avoid to use synchronize_rcu in tunnel free function	2012-10-02 10:29:42 -07:00
lapb	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
llc	llc: fix info leak via getsockname()	2012-10-02 10:29:37 -07:00
mac80211	mac80211: clear bssid on auth/assoc failure	2012-10-02 10:30:07 -07:00
netfilter	ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)	2012-10-02 10:29:37 -07:00
netlabel	netlabel: use GFP flags from caller instead of GFP_ATOMIC	2012-03-22 19:29:57 -04:00
netlink	netlink: fix possible spoofing from non-root processes	2012-10-02 10:29:38 -07:00
netrom	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
nfc	NFC: Prevent multiple buffer overflows in NCI	2012-07-16 09:03:50 -07:00
openvswitch	openvswitch: Reset upper layer protocol info on internal devices.	2012-10-02 10:29:50 -07:00
packet	af_packet: don't emit packet on orig fanout group	2012-10-02 10:29:37 -07:00
phonet	phonet: Sort out initiailziation and cleanup code.	2012-04-13 11:01:43 -04:00
rds	rds: set correct msg_namelen	2012-10-02 10:30:35 -07:00
rfkill	device.h: cleanup users outside of linux/include (C files)	2012-03-11 14:27:37 -04:00
rose	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-04-02 17:53:39 -07:00
rxrpc
sched	net_sched: gact: Fix potential panic in tcf_gact().	2012-10-02 10:29:34 -07:00
sctp	sctp: Fix list corruption resulting from freeing an association on a list	2012-08-09 08:31:42 -07:00
sunrpc	svcrpc: sends on closed socket should stop immediately	2012-09-14 10:00:19 -07:00
tipc	tipc: Optimize setting of immutable payload message header fields	2012-02-29 11:45:35 -05:00
unix	af_netlink: force credentials passing [CVE-2012-3520]	2012-10-02 10:29:37 -07:00
wanrouter	wanmain: comparing array with NULL	2012-08-09 08:31:51 -07:00
wimax
wireless	cfg80211: fix possible circular lock on reg_regdb_search()	2012-10-02 10:30:09 -07:00
x25
xfrm	xfrm: Workaround incompatibility of ESN and async crypto	2012-10-13 05:38:40 +09:00
compat.c	net: Fix references to out-of-scope variables in put_cmsg_compat()	2012-08-09 08:31:42 -07:00
Kconfig
Makefile
nonet.c
socket.c	net: fix info leak in compat dev_ifconf()	2012-10-02 10:29:37 -07:00
sysctl_net.c