summaryrefslogtreecommitdiffstats
path: root/net/xfrm/xfrm_user.c
Commit message (Expand)AuthorAgeFilesLines
* xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquireXin Long2020-04-021-0/+3
* xfrm: fix uctx len check in verify_sec_ctx_lenXin Long2020-04-021-1/+2
* xfrm: clean up xfrm protocol checksCong Wang2019-09-161-13/+1
* xfrm: fix sa selector validationNicolas Dichtel2019-08-041-0/+3
* xfrm: Fix xfrm sel prefix length validationAnirudh Gupta2019-08-041-0/+16
* xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlinkYueHaibing2019-05-251-1/+1
* xfrm: refine validation of template and selector familiesFlorian Westphal2019-02-151-4/+9
* xfrm: validate template modeSean Tranchetti2018-11-101-0/+3
* xfrm: Validate address prefix lengths in the xfrm selector.Steffen Klassert2018-11-101-0/+12
* xfrm: free skb if nlsk pointer is NULLFlorian Westphal2018-09-051-4/+6
* xfrm_user: prevent leaking 2 bytes of kernel memoryEric Dumazet2018-08-241-3/+5
* xfrm_user: uncoditionally validate esn replay attribute structFlorian Westphal2018-04-081-13/+8
* xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies.Steffen Klassert2018-02-251-0/+9
* xfrm: check id proto in validate_tmpl()Cong Wang2018-02-251-0/+15
* ipsec: Fix aborted xfrm policy dump crashHerbert Xu2017-11-021-10/+15
* xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harderAndy Whitcroft2017-03-311-1/+5
* xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_windowAndy Whitcroft2017-03-311-0/+3
* xfrm_user: fix return value from xfrm_user_rcv_msgYi Zhao2016-11-301-1/+1
* xfrm_user: propagate sec ctx allocation errorsMathias Krause2016-09-091-3/+6
* xfrm: get rid of another incorrect WARNVegard Nossum2016-07-271-3/+0
* xfrm: get rid of incorrect WARNVegard Nossum2016-07-271-3/+1
* xfrm: fix crash in XFRM_MSG_GETSA netlink handlerVegard Nossum2016-07-181-3/+3
* xfrm: align nlattr properly when neededNicolas Dichtel2016-04-231-4/+6
* net/xfrm_user: use in_compat_syscall to deny compat syscallsAndy Lutomirski2016-03-221-1/+1
* Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller2015-10-301-1/+4
|\
| * xfrm: Fix unaligned access to stats in copy_to_user_state()Sowmini Varadhan2015-10-231-1/+4
* | xfrm: Fix state threshold configuration from userspaceMichael Rossberg2015-09-291-1/+3
|/
* net/xfrm: use kmemdup rather than duplicating its implementationAndrzej Hajda2015-08-111-4/+2
* xfrm: Fix a typoJakub Wilk2015-07-211-1/+1
* ipsec: Add IV generator information to xfrm_stateHerbert Xu2015-05-281-9/+31
* xfrm: Do not parse 32bits compiled xfrm netlink msg on 64bits hostFan Du2015-03-031-0/+5
* netlink: make nlmsg_end() and genlmsg_end() voidJohannes Berg2015-01-181-9/+18
* xfrm: add XFRMA_REPLAY_VAL attribute to SA messagesdingzhi2014-11-031-4/+8
* ipsec: Remove obsolete MAX_AH_AUTH_LENHerbert Xu2014-09-181-2/+1
* xfrm: configure policy hash table thresholds by netlinkChristophe Gouault2014-09-021-3/+77
* xfrm: Fix installation of AH IPsec SAsTobias Brunner2014-06-301-4/+3
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2014-06-031-11/+25
|\
| * xfrm: fix race between netns cleanup and state expire notificationMichal Kubecek2014-06-031-11/+25
* | Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller2014-05-221-45/+8
|\ \ | |/ |/|
| * xfrm: Remove useless xfrm_audit struct.Tetsuo Handa2014-04-231-30/+8
| * xfrm: Remove useless secid field from xfrm_audit.Tetsuo Handa2014-04-221-21/+6
* | net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman2014-04-241-1/+1
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2014-03-251-3/+3
|\
| * selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov2014-03-101-3/+3
* | Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller2014-03-181-4/+4
|\ \
| * | xfrm: rename struct xfrm_filterNicolas Dichtel2014-03-071-4/+4
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2014-03-051-5/+0
|\ \ \ | |/ / |/| / | |/
| * xfrm: Clone states properly on migrationSteffen Klassert2014-02-201-5/+0
* | ipsec: add support of limited SA dumpNicolas Dichtel2014-02-171-1/+27
* | xfrm: avoid creating temporary SA when there are no listenersHoria Geanta2014-02-131-0/+6