Sebastian Andrzej Siewior b062caf4f7 xfrm: Linearize the skb after offloading if needed. ... [ Upstream commit f015b900bc ] With offloading enabled, esp_xmit() gets invoked very late, from within validate_xmit_xfrm() which is after validate_xmit_skb() validates and linearizes the skb if the underlying device does not support fragments. esp_output_tail() may add a fragment to the skb while adding the auth tag/ IV. Devices without the proper support will then send skb->data points to with the correct length so the packet will have garbage at the end. A pcap sniffer will claim that the proper data has been sent since it parses the skb properly. It is not affected with INET_ESP_OFFLOAD disabled. Linearize the skb after offloading if the sending hardware requires it. It was tested on v4, v6 has been adopted. Fixes: 7785bba299 ("esp: Add a software GRO codepath") Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-06-28 11:12:29 +02:00
..
bpfilter	…
netfilter	netfilter: tproxy: fix deadlock due to missing BH disable	2023-03-17 08:50:25 +01:00
Kconfig	tcp: configurable source port perturb table size	2022-11-16 13:02:04 +00:00
Makefile	…
af_inet.c	tcp: deny tcp_disconnect() when threads are waiting	2023-06-09 10:34:02 +02:00
ah4.c	xfrm: ah: add extack to ah_init_state, ah6_init_state	2022-09-29 07:17:59 +02:00
arp.c	ipv4: move from strlcpy with unused retval to strscpy	2022-08-22 17:59:37 -07:00
bpf_tcp_ca.c	bpf: Use 0 instead of NOT_INIT for btf_struct_access() writes	2022-09-10 17:27:32 -07:00
cipso_ipv4.c	…
datagram.c	Networking fixes for 6.1-rc2, including fixes from netfilter	2022-10-20 17:24:59 -07:00
devinet.c	net: Fix data-races around sysctl_devconf_inherit_init_net.	2022-08-24 13:46:58 +01:00
esp4.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2022-10-03 07:52:13 +01:00
esp4_offload.c	xfrm: Linearize the skb after offloading if needed.	2023-06-28 11:12:29 +02:00
fib_frontend.c	ipv4: Fix incorrect table ID in IOCTL path	2023-03-22 13:33:50 +01:00
fib_lookup.h	…
fib_notifier.c	…
fib_rules.c	…
fib_semantics.c	ipv4: prevent potential spectre v1 gadget in fib_metrics_match()	2023-02-01 08:34:45 +01:00
fib_trie.c	ipv4: Fix error return code in fib_table_insert()	2022-11-22 20:18:20 -08:00
fou.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
gre_demux.c	…
gre_offload.c	net: gro: skb_gro_header helper function	2022-08-25 10:33:21 +02:00
icmp.c	icmp: guard against too small mtu	2023-04-13 16:55:21 +02:00
igmp.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
inet_connection_sock.c	tcp: deny tcp_disconnect() when threads are waiting	2023-06-09 10:34:02 +02:00
inet_diag.c	…
inet_fragment.c	…
inet_hashtables.c	inet: Add IP_LOCAL_PORT_RANGE socket option	2023-06-05 09:26:16 +02:00
inet_timewait_sock.c	tcp: avoid the lookup process failing to get sk in ehash table	2023-02-01 08:34:25 +01:00
inetpeer.c	…
ip_forward.c	…
ip_fragment.c	…
ip_gre.c	erspan: do not use skb_mac_header() in ndo_start_xmit()	2023-03-30 12:49:09 +02:00
ip_input.c	xfrm: fix "disable_policy" on ipv4 early demux	2022-10-12 10:45:34 +02:00
ip_options.c	…
ip_output.c	ipv4: Fix potential uninit variable access bug in __ip_make_skb()	2023-05-11 23:03:26 +09:00
ip_sockglue.c	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 09:26:16 +02:00
ip_tunnel.c	net: tunnels: annotate lockless accesses to dev->needed_headroom	2023-03-22 13:33:46 +01:00
ip_tunnel_core.c	net: Add helper function to parse netlink msg of ip_tunnel_parm	2022-10-03 07:59:06 +01:00
ip_vti.c	…
ipcomp.c	xfrm: ipcomp: add extack to ipcomp{4,6}_init_state	2022-09-29 07:18:00 +02:00
ipconfig.c	Driver core / kernfs changes for 6.0-rc1	2022-08-04 11:31:20 -07:00
ipip.c	net: Add helper function to parse netlink msg of ip_tunnel_parm	2022-10-03 07:59:06 +01:00
ipmr.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-09-22 13:02:10 -07:00
ipmr_base.c	…
metrics.c	ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()	2023-02-01 08:34:45 +01:00
netfilter.c	…
netlink.c	…
nexthop.c	nh: fix scope used to find saddr when adding non gw nh	2022-10-27 10:17:40 -07:00
ping.c	ping: Fix potentail NULL deref for /proc/net/icmp.	2023-04-13 16:55:24 +02:00
proc.c	tcp: Don't allocate tcp_death_row outside of struct netns_ipv4.	2022-09-20 10:21:49 -07:00
protocol.c	…
raw.c	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 09:26:16 +02:00
raw_diag.c	raw: Fix NULL deref in raw_get_next().	2023-04-13 16:55:23 +02:00
route.c	treewide: use get_random_bytes() when possible	2022-10-11 17:42:58 -06:00
syncookies.c	mptcp: remove MPTCP 'ifdef' in TCP SYN cookies	2023-01-07 11:11:44 +01:00
sysctl_net_ipv4.c	net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294	2023-06-14 11:15:16 +02:00
tcp.c	tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set	2023-06-09 10:34:02 +02:00
tcp_bbr.c	bpf: Switch to new kfunc flags infrastructure	2022-07-21 20:59:42 -07:00
tcp_bic.c	…
tcp_bpf.c	bpf, sockmap: Incorrectly handling copied_seq	2023-06-05 09:26:19 +02:00
tcp_cdg.c	Random number generator fixes for Linux 6.1-rc1.	2022-10-16 15:27:07 -07:00
tcp_cong.c	…
tcp_cubic.c	bpf: Switch to new kfunc flags infrastructure	2022-07-21 20:59:42 -07:00
tcp_dctcp.c	bpf: Switch to new kfunc flags infrastructure	2022-07-21 20:59:42 -07:00
tcp_dctcp.h	…
tcp_diag.c	tcp: Access &tcp_hashinfo via net.	2022-09-20 10:21:49 -07:00
tcp_fastopen.c	tcp: Make SYN ACK RTO tunable by BPF programs with TFO	2022-08-17 10:19:22 +01:00
tcp_highspeed.c	…
tcp_htcp.c	…
tcp_hybla.c	…
tcp_illinois.c	…
tcp_input.c	tcp: fix mishandling when the sack compression is deferred.	2023-06-09 10:34:05 +02:00
tcp_ipv4.c	tcp: fix possible sk_priority leak in tcp_v4_send_reset()	2023-05-24 17:32:44 +01:00
tcp_lp.c	…
tcp_metrics.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
tcp_minisocks.c	tcp: tcp_check_req() can be called from process context	2023-03-11 13:55:29 +01:00
tcp_nv.c	…
tcp_offload.c	tcp: gso: really support BIG TCP	2023-06-14 11:15:20 +02:00
tcp_output.c	tcp: tcp_make_synack() can be called from process context	2023-03-22 13:33:43 +01:00
tcp_rate.c	…
tcp_recovery.c	tcp: Fix data-races around sysctl_tcp_recovery.	2022-07-20 10:14:50 +01:00
tcp_scalable.c	…
tcp_timer.c	tcp: fix mishandling when the sack compression is deferred.	2023-06-09 10:34:05 +02:00
tcp_ulp.c	net/ulp: use consistent error code when blocking ULP	2023-01-24 07:24:43 +01:00
tcp_vegas.c	…
tcp_vegas.h	…
tcp_veno.c	…
tcp_westwood.c	…
tcp_yeah.c	…
tunnel4.c	…
udp.c	bpf, sockmap: Pass skb ownership through read_skb	2023-06-05 09:26:18 +02:00
udp_bpf.c	bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()	2023-03-17 08:50:24 +01:00
udp_diag.c	…
udp_impl.h	…
udp_offload.c	…
udp_tunnel_core.c	net/tunnel: wait until all sk_user_data reader finish before releasing the sock	2022-12-31 13:32:27 +01:00
udp_tunnel_nic.c	…
udp_tunnel_stub.c	…
udplite.c	udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().	2023-05-30 14:03:20 +01:00
xfrm4_input.c	xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets	2023-06-28 11:12:28 +02:00
xfrm4_output.c	…
xfrm4_policy.c	…
xfrm4_protocol.c	…
xfrm4_state.c	…
xfrm4_tunnel.c	xfrm: tunnel: add extack to ipip_init_state, xfrm6_tunnel_init_state	2022-09-29 07:18:00 +02:00