android_kernel_samsung_msm8226/net/ipv4
Eric Dumazet e6e21b054b inet: switch IP ID generator to siphash
commit df453700e8d81b1bdafdf684365ee2b9431fb702 upstream.

According to Amit Klein and Benny Pinkas, IP ID generation is too weak
and might be used by attackers.

Even with recent net_hash_mix() fix (netns: provide pure entropy for net_hash_mix())
having 64bit key and Jenkins hash is risky.

It is time to switch to siphash and its 128bit keys.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Amit Klein <aksecurity@gmail.com>
Reported-by: Benny Pinkas <benny@pinkas.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
CVE-2019-10638
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: I607618745f8725e7318ec60e470a77bf0e53df8b
2020-04-18 17:55:14 +02:00
..
netfilter net: Loopback ifindex is constant now 2020-01-06 08:40:40 +01:00
Kconfig Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
Makefile
af_inet.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
ah4.c
arp.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
cipso_ipv4.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
datagram.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
devinet.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
esp4.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
fib_frontend.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
fib_lookup.h
fib_rules.c
fib_semantics.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
fib_trie.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
gre.c
icmp.c net: add a sysctl to reflect the fwmark on replies 2014-08-01 15:43:25 -07:00
igmp.c ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
inet_connection_sock.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
inet_diag.c Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
inet_fragment.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
inet_hashtables.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
inet_lro.c
inet_timewait_sock.c
inetpeer.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ip_forward.c misc: Import SM-G900H kernel source code 2019-08-02 15:14:10 +02:00
ip_fragment.c ipv4: fix path MTU discovery with connection tracking 2020-01-06 08:40:33 +01:00
ip_gre.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
ip_input.c
ip_options.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
ip_output.c ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
ip_sockglue.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
ipcomp.c
ipconfig.c
ipip.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
ipmr.c ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
netfilter.c netfilter: add protocol independent NAT core 2020-01-06 08:40:32 +01:00
ping.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
proc.c tcp: tcp_fragment() should apply sane memory limits 2020-01-06 08:40:44 +01:00
protocol.c
raw.c ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
route.c inet: switch IP ID generator to siphash 2020-04-18 17:55:14 +02:00
syncookies.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
sysctl_net_ipv4.c tcp: add tcp_min_snd_mss sysctl 2020-01-06 08:40:44 +01:00
sysfs_net_ipv4.c msm: Create shadow files under /sys/kernel/ipv4 2014-04-28 16:35:44 -07:00
tcp.c tcp: limit payload size of sacked skbs 2020-01-06 08:40:44 +01:00
tcp_bic.c
tcp_cong.c net: Allow userns root to control ipv4 2020-01-06 08:40:34 +01:00
tcp_cubic.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
tcp_diag.c Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
tcp_input.c tcp: limit payload size of sacked skbs 2020-01-06 08:40:44 +01:00
tcp_ipv4.c tcp: do not lock listener to process SYN packets 2019-08-06 12:26:31 +02:00
tcp_lp.c
tcp_memcontrol.c
tcp_minisocks.c
tcp_output.c tcp: refine memory limit test in tcp_fragment() 2020-01-06 08:40:45 +01:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() 2020-01-06 08:40:44 +01:00
tcp_vegas.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
tcp_vegas.h
tcp_veno.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
tcp_westwood.c
tcp_yeah.c
tunnel4.c
udp.c udp: consistently apply ufo or fragmentation 2020-01-06 08:40:27 +01:00
udp_diag.c
udp_impl.h
udplite.c
xfrm4_input.c
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c ipv4: hash net ptr into fragmentation bucket selection 2020-04-18 17:55:14 +02:00
xfrm4_output.c
xfrm4_policy.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
xfrm4_state.c
xfrm4_tunnel.c