android_kernel_samsung_msm8226/net/ipv6
Eric Dumazet e6e21b054b inet: switch IP ID generator to siphash
commit df453700e8d81b1bdafdf684365ee2b9431fb702 upstream.

According to Amit Klein and Benny Pinkas, IP ID generation is too weak
and might be used by attackers.

Even with recent net_hash_mix() fix (netns: provide pure entropy for net_hash_mix())
having 64bit key and Jenkins hash is risky.

It is time to switch to siphash and its 128bit keys.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Amit Klein <aksecurity@gmail.com>
Reported-by: Benny Pinkas <benny@pinkas.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.16: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
CVE-2019-10638
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: I607618745f8725e7318ec60e470a77bf0e53df8b
2020-04-18 17:55:14 +02:00
..
netfilter netfilter: xt_rpfilter: depend on raw or mangle table 2020-01-06 08:40:35 +01:00
Kconfig
Makefile Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
addrconf.c netfilter: ip6tables: add MASQUERADE target 2020-01-06 08:40:33 +01:00
addrconf_core.c
addrlabel.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
af_inet6.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
ah6.c
anycast.c misc: Import SM-G900H kernel source code 2019-08-02 15:14:10 +02:00
datagram.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
esp6.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
exthdrs.c Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
exthdrs_core.c
fib6_rules.c
icmp.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
inet6_connection_sock.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
inet6_hashtables.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ip6_fib.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ip6_flowlabel.c
ip6_input.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ip6_output.c inet: switch IP ID generator to siphash 2020-04-18 17:55:14 +02:00
ip6_tunnel.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ip6mr.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ipcomp6.c
ipv6_sockglue.c Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
mcast.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
mip6.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
ndisc.c Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0 2019-08-06 11:41:21 +02:00
netfilter.c
output_core.c inet: switch IP ID generator to siphash 2020-04-18 17:55:14 +02:00
ping.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
proc.c
protocol.c
raw.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
reassembly.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
route.c net: Add missing LOOPBACK_IFINDEX change in ipv6/route.c 2020-01-06 08:40:34 +01:00
sit.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
syncookies.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
sysctl_net_ipv6.c net: add a sysctl to reflect the fwmark on replies 2014-08-01 15:43:25 -07:00
tcp_ipv6.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
tunnel6.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
udp.c Revert "net: core: Support UID-based routing." 2019-08-08 15:08:48 +02:00
udp_impl.h Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
udplite.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c
xfrm6_output.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
xfrm6_policy.c Merge tag 'v3.4.113' into lineage-16.0 2019-08-05 14:20:47 +02:00
xfrm6_state.c
xfrm6_tunnel.c