- 2be597a xfrm: policy: match with both mark and mask on user interfaces by Xin Long · 4 years, 1 month ago
- e96d550 xfrm: Fix xfrm migrate issues when address family changes by Yan Yan · 2 years, 6 months ago
- ecb8d2b xfrm: Fix error reporting in xfrm_state_construct. by Steffen Klassert · 3 years, 2 months ago
- 1caa146 xfrm: Fix oops in xfrm_replay_advance_bmp by Shmulik Ladkani · 3 years, 7 months ago
- cca7619 net: xfrm: fix a race condition during allocing spi by zhuoliang zhang · 3 years, 9 months ago
- 43bfc48 xfrm: Use correct address family in xfrm_state_find by Herbert Xu · 3 years, 10 months ago
- 5f334ee xfrm: clone whole liftime_cur structure in xfrm_do_migrate by Antony Antony · 3 years, 11 months ago
- 52914ac xfrm: fix a NULL-ptr deref in xfrm_local_error by Xin Long · 4 years, 2 months ago
- 6215d49 xfrm: fix a warning in xfrm_policy_insert_list by Xin Long · 4 years, 2 months ago
- 918e01b xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input by Xin Long · 4 years, 4 months ago
- 86e98ce xfrm: policy: Fix doulbe free in xfrm_policy_timer by YueHaibing · 4 years, 4 months ago
- c2e254e xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire by Xin Long · 4 years, 6 months ago
- fa40d12 xfrm: fix uctx len check in verify_sec_ctx_len by Xin Long · 4 years, 6 months ago
- 88d0831 xfrm: clean up xfrm protocol checks by Cong Wang · 5 years ago
- dfa3cee5 ipsec: select crypto ciphers for xfrm_algo by Arnd Bergmann · 5 years ago
- 2d0dbd0 xfrm: fix sa selector validation by Nicolas Dichtel · 5 years ago
- 92a63c2 xfrm: Fix xfrm sel prefix length validation by Anirudh Gupta · 5 years ago
- 7c96721 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink by YueHaibing · 5 years ago
- a19fd85 xfrm: refine validation of template and selector families by Florian Westphal · 6 years ago
- bcbc7da xfrm: Fix bucket count reported to userspace by Benjamin Poirier · 6 years ago
- 9da255b xfrm: policy: use hlist rcu variants on insert by Florian Westphal · 6 years ago
- de500b9 xfrm: validate template mode by Sean Tranchetti · 6 years ago
- 89cb86e xfrm: Validate address prefix lengths in the xfrm selector. by Steffen Klassert · 6 years ago
- af322ba xfrm: fix 'passing zero to ERR_PTR()' warning by YueHaibing · 6 years ago
- 301a6da xfrm: free skb if nlsk pointer is NULL by Florian Westphal · 6 years ago
- 590f312 xfrm: fix missing dst_release() after policy blocking lbcast and multicast by Tommi Rantala · 6 years ago
- 2038a9e xfrm_user: prevent leaking 2 bytes of kernel memory by Eric Dumazet · 6 years ago
- 3e54e1c xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) by Antony Antony · 7 years ago
- c4c3203 xfrm: fix state migration copy replay sequence numbers by Antony Antony · 7 years ago
- 02a5b41 xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems by Steffen Klassert · 6 years ago
- 30df7fb5 net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() by Greg Hackmann · 6 years ago
- 0355a9f xfrm_user: uncoditionally validate esn replay attribute struct by Florian Westphal · 6 years ago
- 5eef9b5 net: xfrm: allow clearing socket xfrm policies. by Lorenzo Colitti · 7 years ago
- 9a54c51 xfrm: Fix stack-out-of-bounds with misconfigured transport mode policies. by Steffen Klassert · 7 years ago
- 8555288 xfrm: check id proto in validate_tmpl() by Cong Wang · 7 years ago
- 46b3171 xfrm: Fix stack-out-of-bounds read on socket policy lookup. by Steffen Klassert · 7 years ago
- 5d89917 xfrm: skip policies marked as dead while rehashing by Florian Westphal · 7 years ago
- 6ceabde xfrm: Copy policy family in clone_policy by Herbert Xu · 7 years ago
- 543aabb ipsec: Fix aborted xfrm policy dump crash by Herbert Xu · 7 years ago
- 12a70cc xfrm: policy: check policy direction value by Vladis Dronov · 7 years ago
- 0b86564 xfrm: Don't use sk_family for socket policy lookups by Steffen Klassert · 7 years ago
- 1e16662 xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY by Sabrina Dubroca · 7 years ago
- 79191ea xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder by Andy Whitcroft · 7 years ago
- 64a5465 xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window by Andy Whitcroft · 7 years ago
- f68a09c xfrm: policy: init locks early by Florian Westphal · 7 years ago
- 83e2d05 xfrm_user: fix return value from xfrm_user_rcv_msg by Yi Zhao · 8 years ago
- 330e832 xfrm: unbreak xfrm_sk_policy_lookup by Florian Westphal · 8 years ago
- 07613873 proc: Reduce cache miss in xfrm_statistics_seq_show by Jia He · 8 years ago
- 1678c11 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next by David S. Miller · 8 years ago
- d6989d4 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
- c2f672f xfrm: state lookup can be lockless by Florian Westphal · 8 years ago
- b588479 xfrm: Fix memory leak of aead algorithm name by Ilan Tayari · 8 years ago
- b20b378 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
- 65b323e xfrm: use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 8 years ago
- 2f30ea5 xfrm_user: propagate sec ctx allocation errors by Mathias Krause · 8 years ago
- 575f9c4 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next by David S. Miller · 8 years ago
- 0f76d25 net: xfrm: Change u32 sysctl entries to use proc_douintvec by subashab@codeaurora.org · 8 years ago
- 35db57bb xfrm: state: remove per-netns gc task by Florian Westphal · 8 years ago
- 4141b36 xfrm: Fix xfrm_policy_lock imbalance by Steffen Klassert · 8 years ago
- 9d0380d xfrm: policy: convert policy_lock to spinlock by Florian Westphal · 8 years ago
- d5b8f86 xfrm: policy: don't acquire policy lock in xfrm_spd_getinfo by Florian Westphal · 8 years ago
- ae33786 xfrm: policy: only use rcu in xfrm_sk_policy_lookup by Florian Westphal · 8 years ago
- a7c44247 xfrm: policy: make xfrm_policy_lookup_bytype lockless by Florian Westphal · 8 years ago
- e37cc8a xfrm: policy: use atomic_inc_not_zero in rcu section by Florian Westphal · 8 years ago
- 3084609 xfrm: policy: add sequence count to sync with hash resize by Florian Westphal · 8 years ago
- e1e551b xfrm: policy: prepare policy_bydst hash for rcu lookups by Florian Westphal · 8 years ago
- a5eefc1 xfrm: policy: use rcu versions for iteration and list add/del by Florian Westphal · 8 years ago
- 1625f45 net/xfrm_input: fix possible NULL deref of tunnel.ip6->parms.i_key by Alexey Kodanev · 8 years ago
- d737a58 xfrm: state: don't use lock anymore unless acquire operation is needed by Florian Westphal · 8 years ago
- c840699 xfrm: state: use rcu_deref and assign_pointer helpers by Florian Westphal · 8 years ago
- b65e3d7 xfrm: state: add sequence count to detect hash resizes by Florian Westphal · 8 years ago
- df7274e xfrm: state: delay freeing until rcu grace period has elapsed by Florian Westphal · 8 years ago
- 02efdff xfrm: state: use atomic_inc_not_zero to increment refcount by Florian Westphal · 8 years ago
- ae3fb6d xfrm: state: use hlist_for_each_entry_rcu helper by Florian Westphal · 8 years ago
- e45a8a9 xfrm: constify xfrm_replay structures by Julia Lawall · 8 years ago
- 6916fb3 xfrm: Ignore socket policies when rebuilding hash tables by Tobias Brunner · 8 years ago
- 7677c75 xfrm: get rid of another incorrect WARN by Vegard Nossum · 8 years ago
- 73efc32 xfrm: get rid of incorrect WARN by Vegard Nossum · 8 years ago
- 1ba5bf9 xfrm: fix crash in XFRM_MSG_GETSA netlink handler by Vegard Nossum · 8 years ago
- e800072 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
- 32b583a Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec by David S. Miller · 8 years ago
- de95c4a xfrm: align nlattr properly when needed by Nicolas Dichtel · 8 years ago
- 071d36b xfrm: Fix crash observed during device unregistration and decryption by subashab@codeaurora.org · 8 years ago
- 2bf8c47 net/xfrm_user: use in_compat_syscall to deny compat syscalls by Andy Lutomirski · 8 years ago
- 215276c xfrm: Reset encapsulation field of the skb before transformation by Steffen Klassert · 8 years ago
- 17bc197 ipsec: Use skcipher and ahash when probing algorithms by Herbert Xu · 9 years ago
- 9207f9d net: preserve IP control block during GSO segmentation by Konstantin Khlebnikov · 9 years ago
- 024f35c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec by David S. Miller · 9 years ago
- d188ba8 xfrm: add rcu protection to sk->sk_policy[] by Eric Dumazet · 9 years ago
- 56f0473 xfrm: add rcu grace period in xfrm_policy_destroy() by Eric Dumazet · 9 years ago
- bd5eb35 xfrm: take care of request sockets by Eric Dumazet · 9 years ago
- a8a572a xfrm: dst_entries_init() per-net dst_ops by Dan Streetman · 9 years ago
- e7b63ff Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next by David S. Miller · 9 years ago
- ba3e208 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 9 years ago
- cb866e3 xfrm: Increment statistic counter on inner mode error by Steffen Klassert · 9 years ago
- e33d4f1 xfrm: Fix unaligned access to stats in copy_to_user_state() by Sowmini Varadhan · 9 years ago
- ede2059 dst: Pass net into dst->output by Eric W. Biederman · 9 years ago
- cf91a99 ipv4, ipv6: Pass net into __ip_local_out and __ip6_local_out by Eric W. Biederman · 9 years ago
- 4ebdfba7 dst: Pass a sk into .local_out by Eric W. Biederman · 9 years ago
- 13206b6 net: Pass net into dst_output and remove dst_output_okfn by Eric W. Biederman · 9 years ago