Guillaume Nault 23e7b1bfed xfrm: Don't accidentally set RTO_ONLINK in decode_session4() ...

Similar to commit 94e2238969e8 ("xfrm4: strip ECN bits from tos field"),
clear the ECN bits from iph->tos when setting ->flowi4_tos.
This ensures that the last bit of ->flowi4_tos is cleared, so
ip_route_output_key_hash() isn't going to restrict the scope of the
route lookup.

Use ~INET_ECN_MASK instead of IPTOS_RT_MASK, because we have no reason
to clear the high order bits.

Found by code inspection, compile tested only.

Fixes: 4da3089f2b58 ("[IPSEC]: Use TOS when doing tunnel lookups")
Signed-off-by: Guillaume Nault <gnault@redhat.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2022-01-11 20:36:08 -08:00

..

espintcp.c

espintcp: restore IP CB before handing the packet to xfrm

2020-08-17 15:58:04 +02:00

Kconfig

xfrm/compat: Add 32=>64-bit messages translator

2020-09-24 08:53:03 +02:00

Makefile

xfrm: Provide API to register translator module

2020-09-24 08:53:03 +02:00

xfrm_algo.c

xfrm: Add support for SM4 symmetric cipher algorithm

2021-12-23 09:32:51 +01:00

xfrm_compat.c

xfrm: rate limit SA mapping change message to user space

2021-12-23 09:32:51 +01:00

xfrm_device.c

xfrm: add net device refcount tracker to struct xfrm_state_offload

2021-12-10 08:16:33 -08:00

xfrm_hash.c

mm: remove include/linux/bootmem.h

2018-10-31 08:54:16 -07:00

xfrm_hash.h

xfrm: add state hashtable keyed by seq

2021-05-14 13:52:01 +02:00

xfrm_inout.h

xfrm: move xfrm4_extract_header to common helper

2020-05-06 09:40:08 +02:00

xfrm_input.c

xfrm: update SA curlft.use_time

2021-12-23 09:32:50 +01:00

xfrm_interface.c

xfrm: interface with if_id 0 should return error

2021-12-17 07:17:13 +01:00

xfrm_ipcomp.c

net: xfrm: Fix end of loop tests for list_for_each_entry

2021-07-26 12:26:28 +02:00

xfrm_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-01-09 17:00:17 -08:00

xfrm_policy.c

xfrm: Don't accidentally set RTO_ONLINK in decode_session4()

2022-01-11 20:36:08 -08:00

xfrm_proc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

xfrm_replay.c

xfrm: replay: remove last replay indirection

2021-06-21 09:55:06 +02:00

xfrm_state.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2022-01-06 11:54:20 +00:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-01-09 17:00:17 -08:00