Ahmed S. Darwish e88add19f6 net: xfrm: Localize sequence counter per network namespace ... A sequence counter write section must be serialized or its internal state can get corrupted. The "xfrm_state_hash_generation" seqcount is global, but its write serialization lock (net->xfrm.xfrm_state_lock) is instantiated per network namespace. The write protection is thus insufficient. To provide full protection, localize the sequence counter per network namespace instead. This should be safe as both the seqcount read and write sections access data exclusively within the network namespace. It also lays the foundation for transforming "xfrm_state_hash_generation" data type from seqcount_t to seqcount_LOCKNAME_t in further commits. Fixes: b65e3d7be0 ("xfrm: state: add sequence count to detect hash resizes") Signed-off-by: Ahmed S. Darwish <a.darwish@linutronix.de> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2021-03-22 07:35:42 +01:00
..
espintcp.c	espintcp: restore IP CB before handing the packet to xfrm	2020-08-17 15:58:04 +02:00
Kconfig	xfrm/compat: Add 32=>64-bit messages translator	2020-09-24 08:53:03 +02:00
Makefile	xfrm: Provide API to register translator module	2020-09-24 08:53:03 +02:00
xfrm_algo.c	crypto: skcipher - remove the "blkcipher" algorithm type	2019-11-01 13:38:32 +08:00
xfrm_compat.c	xfrm/compat: Don't allocate memory with __GFP_ZERO	2020-11-09 07:34:56 +01:00
xfrm_device.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2020-06-25 19:29:51 -07:00
xfrm_hash.c	mm: remove include/linux/bootmem.h	2018-10-31 08:54:16 -07:00
xfrm_hash.h	xfrm: use complete IPv6 addresses for hash	2018-10-15 10:09:18 +02:00
xfrm_inout.h	xfrm: move xfrm4_extract_header to common helper	2020-05-06 09:40:08 +02:00
xfrm_input.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2021-01-21 11:05:10 -08:00
xfrm_interface.c	xfrm: interface: fix ipv4 pmtu check to honor ip header df	2021-02-23 18:23:58 +01:00
xfrm_ipcomp.c	net: Use skb_frag_off accessors	2019-07-30 14:21:32 -07:00
xfrm_output.c	xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume	2021-03-03 09:32:52 +01:00
xfrm_policy.c	xfrm: Fix wraparound in xfrm_policy_addr_delta()	2021-01-04 10:35:09 +01:00
xfrm_proc.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
xfrm_replay.c	xfrm: introduce oseq-may-wrap flag	2020-06-24 07:51:01 +02:00
xfrm_state.c	net: xfrm: Localize sequence counter per network namespace	2021-03-22 07:35:42 +01:00
xfrm_sysctl.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
xfrm_user.c	xfrm: Return the correct errno code	2021-02-04 09:29:27 +01:00