android_kernel_samsung_msm8226/net
Eric Dumazet e6e21b054b inet: switch IP ID generator to siphash
commit df453700e8d81b1bdafdf684365ee2b9431fb702 upstream.

According to Amit Klein and Benny Pinkas, IP ID generation is too weak
and might be used by attackers.

Even with recent net_hash_mix() fix (netns: provide pure entropy for net_hash_mix())
having 64bit key and Jenkins hash is risky.

It is time to switch to siphash and its 128bit keys.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Amit Klein <aksecurity@gmail.com>
Reported-by: Benny Pinkas <benny@pinkas.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
CVE-2019-10638
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: I607618745f8725e7318ec60e470a77bf0e53df8b
2020-04-18 17:55:14 +02:00
..
9p Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
802 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net 2012-04-02 17:53:39 -07:00
8021q Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
appletalk appletalk: enforce CAP_NET_RAW for raw sockets 2020-04-18 17:55:14 +02:00
atm Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ax25 ax25: enforce CAP_NET_RAW for raw sockets 2020-04-18 17:55:14 +02:00
batman-adv Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
bluetooth Bluetooth: hidp: fix buffer overflow 2020-01-06 08:40:44 +01:00
bridge netfilter: ebtables: fix erroneous reject of last rule 2020-01-06 08:40:36 +01:00
caif caif: Add sockaddr length check before accessing sa_family in connect handler 2019-08-08 12:09:32 +02:00
can Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ceph libceph: introduce ceph_crypt() for in-place en/decryption 2019-08-06 11:48:20 +02:00
core netns: provide pure entropy for net_hash_mix() 2020-04-18 17:55:14 +02:00
dcb Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
dccp Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
decnet net: Loopback ifindex is constant now 2020-01-06 08:40:40 +01:00
dns_resolver Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
dsa
econet Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
ethernet Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
ieee802154 ieee802154: enforce CAP_NET_RAW for raw sockets 2020-04-18 17:55:14 +02:00
ipv4 inet: switch IP ID generator to siphash 2020-04-18 17:55:14 +02:00
ipv6 inet: switch IP ID generator to siphash 2020-04-18 17:55:14 +02:00
ipx Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
irda irda: Fix lockdep annotations in hashbin_delete(). 2019-08-06 12:26:33 +02:00
iucv af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers 2019-08-08 12:09:30 +02:00
key af_key: unconditionally clone on broadcast 2020-01-06 08:40:43 +01:00
l2tp l2tp: pass tunnel pointer to ->session_create() 2020-01-06 08:40:28 +01:00
lapb Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
llc net/llc: avoid BUG_ON() in skb_orphan() 2019-08-06 12:26:32 +02:00
mac80211 Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
netfilter ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
netlabel Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
netlink netlink: Fix dump skb leak/double free 2019-08-06 12:24:26 +02:00
netrom Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
nfc nfc: Fix the sockaddr length sanitization in llcp_sock_connect 2019-08-08 12:09:32 +02:00
openvswitch Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
packet BACKPORT: packet: in packet_do_bind, test fanout with bind_lock held 2020-01-06 08:40:25 +01:00
phonet Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
rds Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
rfkill Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
rose Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
rxrpc Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
sched Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
sctp sctp: verify size of a new chunk in _sctp_make_chunk() 2020-01-06 08:40:51 +01:00
sunrpc Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
tipc Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
unix af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers 2019-08-08 12:10:17 +02:00
wanrouter Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
wimax
wireless cfg80211: wext: Reject malformed SSID elements 2020-04-18 17:55:14 +02:00
x25 Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
xfrm xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder 2019-08-06 12:26:34 +02:00
Kconfig net: sockev: Initial Commit 2014-07-22 14:33:44 -06:00
Makefile net: activity_stats: Add statistics for network transmission activity 2012-04-09 13:57:50 -07:00
activity_stats.c net: activity_stats: Add statistics for network transmission activity 2012-04-09 13:57:50 -07:00
compat.c net/compat.c,linux/filter.h: share compat_sock_fprog 2019-08-05 14:21:58 +02:00
nonet.c
socket.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
sysctl_net.c